Skip to content

chore: fix actions permission#139

Merged
fuzzzerd merged 1 commit intomasterfrom
release-permission-fix
Sep 25, 2025
Merged

chore: fix actions permission#139
fuzzzerd merged 1 commit intomasterfrom
release-permission-fix

Conversation

@fuzzzerd
Copy link
Copy Markdown
Owner

Potential fix for https://github.com/fuzzzerd/SharpFM/security/code-scanning/2

To fix the problem, add an explicit permissions block to the release job. This should specify the least set of privileges needed. For this workflow, the main requirements are:

  • Read access to repository contents (to check out/build).
  • Write access to releases, since the workflow uploads release assets via softprops/action-gh-release@v2.

Add the following block as a child of the release job, above or below runs-on (but before steps):

permissions:
  contents: read
  releases: write

No changes to imports or methods are necessary; just add the specified block to the job configuration in .github/workflows/release-artifacts.yml, preferably before the runs-on key to match conventions.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@fuzzzerd fuzzzerd changed the title Potential fix for code scanning alert no. 2: Workflow does not contain permissions chore: fix actions permission Sep 25, 2025
@fuzzzerd fuzzzerd marked this pull request as ready for review September 25, 2025 00:37
@fuzzzerd fuzzzerd merged commit 11dacc3 into master Sep 25, 2025
6 checks passed
@fuzzzerd fuzzzerd deleted the release-permission-fix branch September 25, 2025 00:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant