-
Notifications
You must be signed in to change notification settings - Fork 22
Add sync to board workflow #182
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
||
| - uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: "20" | ||
|
|
||
| - run: npm install @octokit/rest | ||
|
|
||
| - run: node simple-sync.js | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.PROJECT_TOKEN }} |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI about 1 month ago
To fix this issue, add an explicit permissions block to the job or at the workflow root specifying the minimal privileges required. Since there are no obvious write actions in the provided workflow (it checks out code, sets up Node.js, installs a package, and runs a script with a token), the minimal recommended starting point from CodeQL is contents: read. To implement the fix, insert a line 'permissions:\n contents: read\n' under the sync job (i.e., below runs-on: ubuntu-latest) in .github/workflows/mdn-contributor-board.yml. This change restricts the job's GITHUB_TOKEN to read-only access to repository contents, mitigating possible privilege escalation risks.
-
Copy modified lines R11-R12
| @@ -8,6 +8,8 @@ | ||
| jobs: | ||
| sync: | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: read | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.

Description
Added workflow to add issues to the MDN contributor board.
Motivation
Deliver
good-first-issues,accepting PR, andhelp wantedlabelled issues in one board for new contributors.