Skip to content

Conversation

@asmfstatoil
Copy link
Collaborator

Potential fix for https://github.com/equinor/neqsim/security/code-scanning/17

To fix this issue, you should add a permissions block at the root of the workflow, directly under the workflow name and before on, so that it applies to all jobs unless a more specific block is added. By specifying permissions: contents: read, you ensure the workflow and its jobs only have read access to repository contents via the GITHUB_TOKEN (i.e., reading code, but not pushing, releasing, or writing to contents, issues, etc.), which is the least privilege necessary for all demonstrated workflow steps. No steps require write access to contents, issues, or other repository resources. Place the following YAML block right after the name: stanza, on line 2. No further modifications are necessary to the job definitions.


Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…in permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@asmfstatoil asmfstatoil marked this pull request as ready for review November 3, 2025 14:47
@asmfstatoil asmfstatoil requested a review from EvenSol as a code owner November 3, 2025 14:47
@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 47.19%. Comparing base (0174bed) to head (1fc2332).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@             Coverage Diff              @@
##             master    #1637      +/-   ##
============================================
- Coverage     47.20%   47.19%   -0.01%     
+ Complexity     9150     9149       -1     
============================================
  Files           885      885              
  Lines         86913    86913              
  Branches      10966    10966              
============================================
- Hits          41028    41020       -8     
- Misses        42790    42798       +8     
  Partials       3095     3095              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@EvenSol EvenSol merged commit 43ebc3c into master Nov 3, 2025
13 checks passed
@EvenSol EvenSol deleted the alert-autofix-17 branch November 3, 2025 17:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants