opendefensecloud
/
solution-arsenal
/
34465628356
80%
|
Ran
|
Jobs
1
|
Files
94
|
Run time
1min
|
Badge
Embed ▾
README BADGES
|
coverage: 79.728% (-0.03%) from 79.756%
push
github
web-flowfix: declare minimal default permissions for GitHub workflows (#793) ## What Improves the score for Token Permissions of SOLAR's OpenSSF scorecard: https://scorecard.dev/viewer/?uri=github.com/opendefensecloud/solution-arsenal ## Why Follow the [OpenSSF guidance](https://github.com/ossf/scorecard/blob/c395761df/docs/checks.md#token-permissions): > The highest score is awarded when the permissions definitions in each workflow's yaml file are set as read-only at the [top level](https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#permissions) and the required write permissions are declared at the [run-level](https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#jobsjob_idpermissions). ## Testing none ## Checklist - [x] ~Tests added/updated~ n/a - [x] No breaking changes (or upgrade path documented above) - [x] Readable commit history (squashed and cleaned up as desired) - [ ] AI code review considered and comments resolved <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit - **Chores** - Improved workflow security by limiting permissions at the workflow level. - Scoped write access to only the documentation deployment and Renovate approval jobs that require it. - Retained required scanning and deployment capabilities while reducing unnecessary access for other jobs. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
5813 of 7291 relevant lines covered (79.73%)
56.96 hits per line
Coverage Regressions
| Lines | Coverage | ∆ | File |
|---|---|---|---|
| 4 |
78.44 |
-0.36% | pkg/controller/target_controller.go |
| 2 |
89.47 |
-1.75% | pkg/discovery/runner.go |
Jobs
| ID | Job ID | Ran | Files | Coverage | |
|---|---|---|---|---|---|
| 1 | 34465628356.1 | 94 |
79.73 |
GitHub Action Run |
