Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions .github/workflows/test-package-stylelint-suitcss-968.latest.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
name: stylelint-suitcss
on:
push:
branches:
- main
paths:
- .github/workflows/test-package.yml
- .github/workflows/test-package-stylelint-suitcss-968.latest.yml
pull_request:
paths:
- .github/workflows/test-package.yml
- .github/workflows/test-package-stylelint-suitcss-968.latest.yml
workflow_dispatch: null
schedule:
- cron: 0 0 * * *
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}-stylelint-suitcss-968-latest
cancel-in-progress: true
jobs:
test:
uses: ./.github/workflows/test-package.yml
name: latest
with:
package: stylelint-suitcss
stylelint-version: stylelint@latest
install-command: yarn
list-installed-versions-command: yarn list --pattern stylelint
Comment on lines +21 to +27

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium test

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 6 months ago

To fix the problem, add a permissions block to the workflow file. This block should be placed at the root level (top-level, alongside name, on, etc.) to apply to all jobs in the workflow, unless a job overrides it. The minimal safe default is contents: read, which grants read-only access to repository contents. If the workflow or any called workflow requires additional permissions, those can be added as needed, but starting with contents: read is the recommended baseline. The change should be made at the top of .github/workflows/test-package-stylelint-suitcss-968.latest.yml, after the name field and before on:.


Suggested changeset 1
.github/workflows/test-package-stylelint-suitcss-968.latest.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/test-package-stylelint-suitcss-968.latest.yml b/.github/workflows/test-package-stylelint-suitcss-968.latest.yml
--- a/.github/workflows/test-package-stylelint-suitcss-968.latest.yml
+++ b/.github/workflows/test-package-stylelint-suitcss-968.latest.yml
@@ -1,2 +1,4 @@
 name: stylelint-suitcss
+permissions:
+  contents: read
 on:
EOF
@@ -1,2 +1,4 @@
name: stylelint-suitcss
permissions:
contents: read
on:
Copilot is powered by AI and may make mistakes. Always verify output.
27 changes: 27 additions & 0 deletions .github/workflows/test-package-stylelint-suitcss-968.next.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
name: stylelint-suitcss
on:
push:
branches:
- main
paths:
- .github/workflows/test-package.yml
- .github/workflows/test-package-stylelint-suitcss-968.next.yml
pull_request:
paths:
- .github/workflows/test-package.yml
- .github/workflows/test-package-stylelint-suitcss-968.next.yml
workflow_dispatch: null
schedule:
- cron: 0 0 * * *
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}-stylelint-suitcss-968-next
cancel-in-progress: true
jobs:
test:
uses: ./.github/workflows/test-package.yml
name: next
with:
package: stylelint-suitcss
stylelint-version: stylelint/stylelint
install-command: yarn
list-installed-versions-command: yarn list --pattern stylelint
Comment on lines +21 to +27

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium test

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 6 months ago

To fix the problem, add a permissions block to the workflow file to explicitly set the minimum required permissions for the GITHUB_TOKEN. Since the workflow only calls another workflow and does not appear to require any write permissions, the safest minimal starting point is to set permissions: read-all at the root of the workflow. This ensures that all jobs in the workflow, unless overridden, will only have read access. The change should be made at the top level of .github/workflows/test-package-stylelint-suitcss-968.next.yml, after the name and before the on block (or after the on block, but before jobs).


Suggested changeset 1
.github/workflows/test-package-stylelint-suitcss-968.next.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/test-package-stylelint-suitcss-968.next.yml b/.github/workflows/test-package-stylelint-suitcss-968.next.yml
--- a/.github/workflows/test-package-stylelint-suitcss-968.next.yml
+++ b/.github/workflows/test-package-stylelint-suitcss-968.next.yml
@@ -1,2 +1,3 @@
 name: stylelint-suitcss
+permissions: read-all
 on:
EOF
@@ -1,2 +1,3 @@
name: stylelint-suitcss
permissions: read-all
on:
Copilot is powered by AI and may make mistakes. Always verify output.
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,7 @@ To see test results, click the status badge for the relevant package in the list
| [![stylelint-scss](https://img.shields.io/npm/v/stylelint-scss.svg)](https://www.npmjs.com/package/stylelint-scss) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-scss-d08.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-scss-d08.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-scss-d08.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-scss-d08.next.yml) |
| [![stylelint-selector-bem-pattern](https://img.shields.io/npm/v/stylelint-selector-bem-pattern.svg)](https://www.npmjs.com/package/stylelint-selector-bem-pattern) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-selector-bem-pattern-93e.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-selector-bem-pattern-93e.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-selector-bem-pattern-93e.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-selector-bem-pattern-93e.next.yml) |
| [![stylelint-stylus](https://img.shields.io/npm/v/stylelint-stylus.svg)](https://www.npmjs.com/package/stylelint-stylus) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-stylus-448.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-stylus-448.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-stylus-448.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-stylus-448.next.yml) |
| [![stylelint-suitcss](https://img.shields.io/npm/v/stylelint-suitcss.svg)](https://www.npmjs.com/package/stylelint-suitcss) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-suitcss-968.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-suitcss-968.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-suitcss-968.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-suitcss-968.next.yml) |
| [![stylelint-use-logical](https://img.shields.io/npm/v/stylelint-use-logical.svg)](https://www.npmjs.com/package/stylelint-use-logical) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-b8e.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-b8e.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-b8e.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-b8e.next.yml) |
| [![stylelint-use-logical-spec](https://img.shields.io/npm/v/stylelint-use-logical-spec.svg)](https://www.npmjs.com/package/stylelint-use-logical-spec) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-spec-a36.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-spec-a36.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-spec-a36.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-logical-spec-a36.next.yml) |
| [![stylelint-use-nesting](https://img.shields.io/npm/v/stylelint-use-nesting.svg)](https://www.npmjs.com/package/stylelint-use-nesting) | [![latest](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-nesting-54f.latest.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-nesting-54f.latest.yml) | [![next](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-nesting-54f.next.yml/badge.svg)](https://github.com/stylelint/stylelint-ecosystem-tester/actions/workflows/test-package-stylelint-use-nesting-54f.next.yml) |
Expand Down
5 changes: 4 additions & 1 deletion data/ecosystem.yml
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,10 @@ packages:
- 'stylelint-scss'
- 'stylelint-selector-bem-pattern'
- 'stylelint-stylus'
# - 'stylelint-suitcss'
- [
'stylelint-suitcss',
{ install-command: 'yarn', list-installed-versions-command: 'yarn list --pattern stylelint' },
]
- 'stylelint-use-logical'
- 'stylelint-use-logical-spec'
- 'stylelint-use-nesting'
Expand Down
Loading