Merge pull request #102 from yamachu/re-debug

GitHub Actionsの必要なPermissionを更に調べる
yamachu · May 6, 2024 · 5c37572 · 5c37572
2 parents 7f83fde + c7b6e1e
commit 5c37572
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 3 deletions.
diff --git a/.github/workflows/merge-queue-trigger-handler.yml b/.github/workflows/merge-queue-trigger-handler.yml
@@ -7,8 +7,12 @@ jobs:
   CommentHandle:
     if: (contains(github.event.comment.body, '/mq') && github.event.issue.pull_request != null)
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      actions: write
     steps:
-      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - uses: yamachu/merge-queue-action/precheck@main
       - uses: actions/checkout@v4
         with:

diff --git a/.github/workflows/testing-queue.yml b/.github/workflows/testing-queue.yml
@@ -15,11 +15,14 @@ concurrency:
 jobs:
   PreTesting:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     outputs:
       base-branch: ${{ steps.pretesting.outputs.base-branch }}
       base-branch-sha: ${{ steps.pretesting.outputs.base-branch-sha }}
     steps:
-      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - uses: yamachu/merge-queue-action/pretesting@main
         id: pretesting
         with:
@@ -36,8 +39,10 @@ jobs:
   PostTesting:
     runs-on: ubuntu-latest
     needs: [PreTesting, Test]
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
-      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - uses: yamachu/merge-queue-action/posttesting@main
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}