Skip to content

chore: tighten workflow permissions and docs#52

Open
vveliev wants to merge 2 commits intomainfrom
chore/tighten-workflows
Open

chore: tighten workflow permissions and docs#52
vveliev wants to merge 2 commits intomainfrom
chore/tighten-workflows

Conversation

@vveliev
Copy link
Owner

@vveliev vveliev commented Jan 21, 2026

Summary

  • tighten workflow permissions
  • update docs and release mapping

Testing

  • not run

Copilot AI review requested due to automatic review settings January 21, 2026 23:20
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR tightens GitHub Actions workflow permissions following the principle of least privilege and updates documentation with spelling corrections and usage examples.

Changes:

  • Fixed release configuration mapping (changed commit type from 'test' to 'fix' for Bug Fixes category)
  • Corrected spelling errors throughout documentation ("Continious" → "Continuous", "privious" → "previous")
  • Added explicit permission blocks to workflows and refined existing permissions to grant only necessary access
  • Enhanced README with usage examples and improved artifact upload exclusions

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
release.config.js Fixed commit type mapping from 'test' to 'fix' for Bug Fixes category
README.md Corrected spelling errors and added usage documentation with examples
.github/workflows/release.yml Removed unnecessary permissions (actions, id-token) and added issues permission
.github/workflows/precommit.yml Removed unnecessary pull-requests read permission
.github/workflows/ci-init.yml Fixed spelling in description and added .git/.github exclusions to artifact
.github/workflows/ci-autoupdate-github-action.yml Removed unnecessary pull-requests write permission
.github/workflows/aws-tofu-plan-apply.yml Added explicit permissions block (contents: read, pull-requests: write)
.github/workflows/aws-terraform-plan-apply.yml Added explicit permissions block (contents: read, pull-requests: write)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

README.md Outdated
Comment on lines 31 to 36
init:
uses: vveliev/ci/.github/workflows/ci-init.yml@main
with:
artifact_name: source-code
artifact_upload: true
runs-on: "['ubuntu-latest']"
Copy link

Copilot AI Jan 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The YAML example uses tab characters for indentation, which is invalid in YAML. YAML requires spaces for indentation. The indentation should use spaces instead of tabs.

Suggested change
init:
uses: vveliev/ci/.github/workflows/ci-init.yml@main
with:
artifact_name: source-code
artifact_upload: true
runs-on: "['ubuntu-latest']"
init:
uses: vveliev/ci/.github/workflows/ci-init.yml@main
with:
artifact_name: source-code
artifact_upload: true
runs-on: "['ubuntu-latest']"

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant