Skip to content
manavarya-bot

fix(codeql): close remaining 6 alerts — fs races + dead code #44

Sign in to view logs

fix(codeql): close remaining 6 alerts — fs races + dead code

fix(codeql): close remaining 6 alerts — fs races + dead code #44

Workflow file for this run

.github/workflows/manavarya-bot.yml at 8c0643a
# Managed by bot-manavarya/reviewer — edits will be overwritten.
name: manavarya-bot
on:
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
issue_comment:
types: [created]
jobs:
review:

Check failure on line 11 in .github/workflows/manavarya-bot.yml

View workflow run for this annotation

GitHub Actions / manavarya-bot

Invalid workflow file 

The workflow is not valid. .github/workflows/manavarya-bot.yml (Line: 11, Col: 3): Error calling workflow 'bot-manavarya/reviewer/.github/workflows/review.yml@main'. The nested job 'review' is requesting 'contents: write, issues: write, pull-requests: write', but is only allowed 'contents: read, issues: none, pull-requests: none'.
if: |
(github.event_name == 'pull_request' && github.event.pull_request.draft == false)
|| (github.event_name == 'issue_comment' && github.event.issue.pull_request != null && startsWith(github.event.comment.body, '/bot'))
uses: bot-manavarya/reviewer/.github/workflows/review.yml@main
with:
provider: 'gemini'
model: 'gemini-2.5-flash'
secrets:
bot-token: ${{ secrets.MANAVARYA_BOT_TOKEN }}
gemini-api-key: ${{ secrets.GEMINI_API_KEY }}