Merged
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| jobs: | ||
| call-workflow: | ||
| uses: nmfs-fish-tools/ghactions4r/.github/workflows/spell-check.yml@main | ||
| uses: nmfs-ost/ghactions4r/.github/workflows/spell-check.yml@main |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 12 months ago
To fix the issue, we will add a permissions block at the root level of the workflow. This block will define the minimal permissions required for the workflow to function. Since the workflow appears to be related to spell-checking, it likely only needs read access to the repository contents. We will set contents: read as the permission.
Suggested changeset
1
.github/workflows/call-spell-check.yml
| @@ -2,2 +2,4 @@ | ||
| name: call-spell-check | ||
| permissions: | ||
| contents: read | ||
| # on specifies the build triggers. See more info at https://docs.github.com/en/actions/learn-github-actions/events-that-trigger-workflows |
Copilot is powered by AI and may make mistakes. Always verify output.
Schiano-NOAA
approved these changes
May 2, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hello, this repository depends on ghactions4r. The ghactions4r repository will be moving from https://github.com/nmfs-fish-tools/ghactions4r to https://github.com/nmfs-ost/ghactions4r on May 16, 2025 between 9 am and 12 pm pacific. When the move happens, all GitHub actions workflows that reference a ghactions4r workflow will break.
To keep actions from breaking, please take a look at your github action YAML files (located under .github/workflows in your repository) and change any references of nmfs-fish-tools/ghactions4r (the old organization) to nmfs-ost/ghactions4r (the new organization) between now and May 16. This has been done for you in this pull request, so it can simply be merged in.
If you would like to make the changes yourself, the global replace tool in Rstudio or the search across files functionality in vs code can help you quickly find all instances of nmfs-fish-tools/ghactions4r and replace them with nmfs-ost/ghactions4r.
For example, someone using the call-spell-check.yml file would change the line
to
Please reach out if you have any questions.