security: add explicit permissions to all GitHub Actions workflows #5944
pull-request.yaml
on: pull_request
detect-changes
lint
/
lint
Matrix: agent / native
Waiting for pending jobs
Matrix: vscode / native
Waiting for pending jobs
generate-licenses
/
license-check
Matrix: e2e / cypress
Waiting for pending jobs
upload
/
upload
Annotations
1 error
|
Invalid workflow file:
.github/workflows/pull-request.yaml#L80
The workflow is not valid. .github/workflows/pull-request.yaml (Line: 80, Col: 3): Error calling workflow 'posit-dev/publisher/.github/workflows/upload.yaml@360e34ef4f0ba0fbae9221aa6d32eb531578dee1'. The workflow is requesting 'id-token: write', but is only allowed 'id-token: none'.
|