Skip to content

Conversation

@honestbank-bot
Copy link
Contributor

@honestbank-bot honestbank-bot commented Nov 6, 2024

synced local file(s) with honestbank/.github.


This PR was created automatically by the repo-file-sync-action workflow run #18672768423

@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 6a5c6fa to 074652b Compare November 7, 2024 08:46
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 074652b to 3a79da3 Compare November 13, 2024 04:16
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 3a79da3 to 1147915 Compare November 13, 2024 06:18
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 1147915 to 8c282d6 Compare November 13, 2024 07:23
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 8c282d6 to aea6b72 Compare November 13, 2024 08:14
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from aea6b72 to 77057e9 Compare November 14, 2024 07:01
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 77057e9 to 0d97ee2 Compare November 15, 2024 03:25
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 0d97ee2 to e282abb Compare November 19, 2024 03:13
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from e282abb to 9d285b7 Compare November 19, 2024 06:17
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 9d285b7 to ec39895 Compare November 22, 2024 08:29
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from ec39895 to 9b998d1 Compare November 25, 2024 05:54
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 9b998d1 to b9d5d69 Compare November 25, 2024 06:25
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from b9d5d69 to bc09f69 Compare November 25, 2024 07:15
Comment on lines +9 to +33
name: "terraform"
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
with:
submodules: "recursive"
- name: Set up Terraform
uses: hashicorp/setup-terraform@v3
with:
cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
- name: Terraform Format
id: fmt
run: terraform fmt
continue-on-error: true
- name: Terraform Init
id: init
run: terraform init
- name: Terraform Validate
id: validate
run: terraform validate -no-color
- name: Terraform Plan
id: plan
run: terraform plan -no-color
continue-on-error: true

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 3 months ago

The best way to fix this issue is to add a permissions block to either the root of the workflow (applies to all jobs) or specifically to the affected job (terraform) if only one job exists. Given only one job (terraform) and to be maximally clear, add the block within the job's definition. The minimal permissions required are usually contents: read, since the workflow only needs to read code from the repository, not write. This is inserted directly after the job name (after line 9) and before runs-on.

No imports or custom methods are needed; this is a YAML configuration change.


Suggested changeset 1
.github/workflows/terraform.yaml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/terraform.yaml b/.github/workflows/terraform.yaml
--- a/.github/workflows/terraform.yaml
+++ b/.github/workflows/terraform.yaml
@@ -7,6 +7,8 @@
 jobs:
   terraform:
     name: "terraform"
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
EOF
@@ -7,6 +7,8 @@
jobs:
terraform:
name: "terraform"
permissions:
contents: read
runs-on: ubuntu-latest
steps:
- name: Checkout
Copilot is powered by AI and may make mistakes. Always verify output.
Comment on lines +14 to +30
name: terratest
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
with:
submodules: true
- name: Set up Go
uses: actions/setup-go@v5
with:
go-version: 1.20
id: go
- name: Run 'go test -v -timeout 60m'
run: |
cd test
go mod download
go test -v -timeout 30m

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 3 months ago

To address this issue, explicitly set the permissions: block for the job (terratest), or at the workflow root to apply to all jobs. Since there is no indication that this workflow requires write access to repository contents, permissions: contents: read is the recommended minimal starting point. Place the block under the terratest job on line 15 (before runs-on:), as per the highlighted error location. This change will limit the GITHUB_TOKEN permissions accessible to this job to repository contents in read-only mode, adhering to the principle of least privilege and best practices for GitHub Actions workflows.

Suggested changeset 1
.github/workflows/terratest.yaml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/terratest.yaml b/.github/workflows/terratest.yaml
--- a/.github/workflows/terratest.yaml
+++ b/.github/workflows/terratest.yaml
@@ -12,6 +12,8 @@
 jobs:
   terratest:
     name: terratest
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
EOF
@@ -12,6 +12,8 @@
jobs:
terratest:
name: terratest
permissions:
contents: read
runs-on: ubuntu-latest
steps:
- name: Checkout
Copilot is powered by AI and may make mistakes. Always verify output.
@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 8b469d0 to 7af471a Compare April 24, 2025 07:38
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 7af471a to 08f9741 Compare May 7, 2025 09:28
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 08f9741 to 36eebeb Compare May 13, 2025 07:18
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 36eebeb to 1de9b91 Compare May 23, 2025 07:43
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 1de9b91 to 8ee500f Compare May 23, 2025 09:09
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 8ee500f to 605cbf1 Compare June 23, 2025 09:56
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 605cbf1 to ca776d3 Compare June 24, 2025 03:39
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from ca776d3 to a64fa26 Compare June 24, 2025 04:23
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from a64fa26 to 214b8ae Compare June 24, 2025 05:29
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 214b8ae to 3040430 Compare June 24, 2025 06:14
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 3040430 to a626277 Compare June 24, 2025 06:44
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from a626277 to 38252ff Compare July 8, 2025 06:21
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 38252ff to 2c0338b Compare September 19, 2025 09:37
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

@honestbank-bot honestbank-bot force-pushed the sync_workflow_files/default branch from 2c0338b to 3eaa69c Compare October 21, 2025 04:27
@honestbank-bot
Copy link
Contributor Author

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖Success! The configuration is valid.

Pusher: @honestbank-bot, Action: pull_request, Working Directory: ``, Workflow: terraform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants