nocarryr / python-dispatch / 40518413717
98%

DEFAULT BRANCH: master
Ran
Jobs 4
Files 9
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 97.066% (-0.8%) from 97.887%
40518413717

push

github

web-flow 
Set least-privilege permissions for GitHub Actions (#129)

Both workflows inherited token permissions from repository defaults, and Coveralls installation shared a step with token-bearing completion. This change establishes explicit permission boundaries and narrows token exposure.

- **Permissions:** Set workflow defaults to no permissions. Grant `contents: read` only to checkout and Coveralls jobs; keep `id-token: write` limited to PyPI deployment.
- **Credentials:** Disable persisted checkout credentials. Install Coveralls separately so only the completion command receives `GITHUB_TOKEN`.

```yaml
permissions: {}

jobs:
  test:
    permissions:
      contents: read
  deploy:
    permissions:
      id-token: write
```

<!-- START COPILOT CODING AGENT SUFFIX -->

- Fixes #128

<!-- This is an auto-generated comment: release notes by coderabbit.ai -->
<!-- coderabbit-ai-generated:v1 -->

## Summary by CodeRabbit

* **Chores**
  * Updated CI and distribution workflows to use more limited permissions and avoid retaining checkout credentials.
  * Kept the required publishing authorization in place and separated Coveralls installation from its completion step.
  * CI and distribution jobs now have read-only access to repository contents, while publishing retains its required identity authorization.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

827 of 852 relevant lines covered (97.07%)

3.88 hits per line

Coverage Regressions

Lines Coverage ∆ File
7
94.49
-5.51% pydispatch/aioutils.py
Jobs
ID Job ID Ran Files Coverage
1 run-3.10 - 40518413717.1 9
97.07
GitHub Action Run
2 run-3.13 - 40518413717.2 9
97.07
GitHub Action Run
3 run-3.12 - 40518413717.3 9
97.07
GitHub Action Run
4 run-3.8 - 40518413717.4 9
97.07
GitHub Action Run
Source Files on build 40518413717