27147079258
92%

Ran 08 Jun 2026 03:12PM UTC

Jobs 6

Files 60

Run time 1min

Badge

Embed ▾

Committed 08 Jun 2026 03:07PM UTC coverage: 91.834%. Remained the same

Build # 27147079258

Build Type

push

github

Committed by

web-flow

Commit Message

Restrict token access (#2367)

<!--Please ensure the PR fulfills the following requirements! -->
<!-- If this is your first PR, make sure to add your details to the
AUTHORS.rst! -->
### Pull Request Checklist:
- [ ] This PR addresses an already opened issue (for bug fixes /
features)
    - This PR fixes #xyz
- [ ] Tests for the changes have been added (for bug fixes / features)
- [ ] (If applicable) Documentation has been added / updated (for bug
fixes / features)
- [x] CHANGELOG.rst has been updated (with summary of main changes)
- [x] Link to issue (:issue:`number`) and pull request (:pull:`number`)
has been added

### What kind of change does this PR introduce?

* Adjust the token creation permissions to prevent creating tokens with
too much access.
* Spacing fixes for better readability.
* ReadTheDocs OS version updated to ubuntu-26.04.
* `workflow-warning` workflow now just uses GH API calls.
* Adds the `zizmor` hook for evaluating CI workflow security. 

### Does this PR introduce a breaking change?

No.

### Other information:

Token permissions options for the `actions/create-github-app-token` took
me entirely by surprise; This step should be inheriting from the
workflow and job permissions, but **it does not**. How odd.

Coverage Stats

7940 of 8646 relevant lines covered (91.83%)

6.27 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-3.13-macos-latest- - 27147079258.1	08 Jun 2026 03:13PM UTC	60	91.04	GitHub Action Run
2	run-3.13-ubuntu-latest- - 27147079258.2	08 Jun 2026 03:13PM UTC	60	88.03	GitHub Action Run
3	run-3.12-ubuntu-latest- - 27147079258.3	08 Jun 2026 03:14PM UTC	60	88.71	GitHub Action Run
4	run-3.10-ubuntu-latest- - 27147079258.4	08 Jun 2026 03:12PM UTC	60	88.04	GitHub Action Run
5	run-3.14-ubuntu-latest- - 27147079258.5	08 Jun 2026 03:12PM UTC	60	88.03	GitHub Action Run
6	run-{{ matrix.python-version }}-conda - 27147079258.6	08 Jun 2026 03:14PM UTC	60	91.42	GitHub Action Run

Ouranosinc / xclim / 27147079258
92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27147079258

Ouranosinc / xclim / 27147079258 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27147079258

Ouranosinc / xclim / 27147079258
92%

README BADGES
x