mirror of
https://github.com/pezkuwichain/pezkuwi-apps.git
synced 2026-10-20 18:56:30 +00:00
Satoshi Qazi Muhammed
1a4d109f69
CodeQL actions/missing-workflow-permissions: chain-endpoints.yml, lock.yml, pr-any.yml, test-nightly.yml had no permissions block, so their jobs received the repository default token. Read-only where nothing writes through GITHUB_TOKEN; lock-threads gets the issues/pull-requests/discussions write it documents; workflows that write do it with a separate bot or app token, so GITHUB_TOKEN stays read-only.
39 lines
970 B
YAML
39 lines
970 B
YAML
name: Chain endpoints
|
|
on:
|
|
schedule:
|
|
# twice daily (mornings/afternoons, the latter being busy)
|
|
# - cron: '50 0/12 * * *'
|
|
# once daily (early mornings, 02:50 GMT, generally not busy)
|
|
- cron: '50 2 * * *'
|
|
|
|
|
|
# GITHUB_TOKEN only opens an issue when the endpoint check fails.
|
|
permissions:
|
|
contents: read
|
|
issues: write
|
|
|
|
jobs:
|
|
endpoints:
|
|
if: github.repository == 'pezkuwichain/pezkuwi-apps'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 'lts/*'
|
|
- name: check
|
|
env:
|
|
CI_LOG: 123
|
|
run: |
|
|
yarn install --immutable | grep -v 'YN0013'
|
|
yarn ci:chainEndpoints
|
|
|
|
- name: issue
|
|
if: ${{ failure() }}
|
|
uses: JasonEtco/create-an-issue@e27dddc79c92bc6e4562f268fffa5ed752639abd
|
|
env:
|
|
GITHUB_TOKEN: ${{ github.token }}
|
|
with:
|
|
filename: .github/chain-endpoints.md
|
|
update_existing: true
|