Skip to content

Reduce workflow permissions further #109

Reduce workflow permissions further

Reduce workflow permissions further #109

Workflow file for this run

name: Archive Binary
permissions:
actions: read
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
schedule:
- cron: "0 0 * * *"
jobs:
build-package:

Check failure on line 14 in .github/workflows/rust.yml

View workflow run for this annotation

GitHub Actions / Archive Binary

Invalid workflow file

The workflow is not valid. .github/workflows/rust.yml (Line: 14, Col: 3): Error calling workflow 'intel/dml-language-server/.github/workflows/binaries.yml@80e241eed3e11342c34bbad9f7e41dd684bb30b8'. The nested job 'build' is requesting 'actions: write', but is only allowed 'actions: read'.
strategy:
matrix:
os:
- ubuntu-latest
- windows-latest
include:
- os: ubuntu-latest
binary: dls
- os: windows-latest
binary: dls.exe
uses: ./.github/workflows/binaries.yml
with:
binary_name: ${{ matrix.binary }}
output_binary_name: dml-server-${{ matrix.os }}
log-dir: ${{ matrix.binary }}-logs
os: ${{ matrix.os }}
check-package:
uses: ./.github/workflows/scans.yml
with:
os: ubuntu-latest
log-dir: checking-logs
merge-package:
runs-on:
- ubuntu-latest
needs: build-package
permissions:
actions: write
steps:
- name: Merge Artifacts
uses: actions/upload-artifact/merge@v4
with:
name: dml-server
pattern: dml-server-*