Skip to content

Conversation

@lenucksi
Copy link
Member

Potential fix for https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/6

To fix the problem, add a permissions block to the workflow file at the job or root level, specifying the least privileges required for the workflow to operate. In this case, the workflow reads repository contents and uses gh to create and comment on issues. Therefore, you should set contents: read and issues: write. Place the permissions block at the root level so it applies to all jobs, typically immediately under the name field, before the on: field.

Specific steps:

  • In the file .github/workflows/i18n-consistency-checker.yaml

  • Insert the following block after name: i18n Consistency Check (line 6):

    permissions:
      contents: read
      issues: write

No other code, imports, or settings need to be changed.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@spier spier added the Type - Maintenance / Cleanup Maintaining / cleaning the repo is the main focus of this issue / PR label Dec 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type - Maintenance / Cleanup Maintaining / cleaning the repo is the main focus of this issue / PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants