From fcfa465687bb8c01edcc50a1deeea68fd0fd016f Mon Sep 17 00:00:00 2001 From: Alexander Ryzhikov Date: Wed, 17 Dec 2025 15:49:12 +0200 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 2: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/pull_request.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml index 64a7794..4b71884 100644 --- a/.github/workflows/pull_request.yml +++ b/.github/workflows/pull_request.yml @@ -1,4 +1,6 @@ name: Pull Request +permissions: + contents: read on: pull_request: From ad42eaefb8b5f628c54824fdf6c0553d3617e952 Mon Sep 17 00:00:00 2001 From: Alexander Ryzhikov Date: Wed, 17 Dec 2025 15:51:17 +0200 Subject: [PATCH 2/2] bump actions checkout and setup-node --- .github/workflows/pull_request.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml index 4b71884..161b559 100644 --- a/.github/workflows/pull_request.yml +++ b/.github/workflows/pull_request.yml @@ -9,9 +9,9 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: 24 cache: npm