Merge pull request #417 from ygd58/fix/ci-fork-pr-permissions

fix: add explicit permissions to allow CI on fork PRs
This commit is contained in:
Sergio Chouhy 2026-04-02 12:27:32 -03:00 committed by GitHub
commit fbdfd8f7ef
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -11,6 +11,10 @@ on:
- "**.md" - "**.md"
- "!.github/workflows/*.yml" - "!.github/workflows/*.yml"
permissions:
contents: read
pull-requests: read
name: General name: General
jobs: jobs:
@ -19,7 +23,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- name: Install nightly toolchain for rustfmt - name: Install nightly toolchain for rustfmt
run: rustup install nightly --profile minimal --component rustfmt run: rustup install nightly --profile minimal --component rustfmt
@ -32,7 +36,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- name: Install taplo-cli - name: Install taplo-cli
run: cargo install --locked taplo-cli run: cargo install --locked taplo-cli
@ -45,7 +49,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- name: Install active toolchain - name: Install active toolchain
run: rustup install run: rustup install
@ -61,7 +65,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- name: Install cargo-deny - name: Install cargo-deny
run: cargo install --locked cargo-deny run: cargo install --locked cargo-deny
@ -77,7 +81,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- uses: ./.github/actions/install-system-deps - uses: ./.github/actions/install-system-deps
@ -106,7 +110,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- uses: ./.github/actions/install-system-deps - uses: ./.github/actions/install-system-deps
@ -134,7 +138,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- uses: ./.github/actions/install-system-deps - uses: ./.github/actions/install-system-deps
@ -164,7 +168,7 @@ jobs:
# steps: # steps:
# - uses: actions/checkout@v5 # - uses: actions/checkout@v5
# with: # with:
# ref: ${{ github.head_ref }} # ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
# - uses: ./.github/actions/install-system-deps # - uses: ./.github/actions/install-system-deps
@ -192,7 +196,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- uses: ./.github/actions/install-system-deps - uses: ./.github/actions/install-system-deps
@ -218,7 +222,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v5
with: with:
ref: ${{ github.head_ref }} ref: ${{ github.event.pull_request.head.sha || github.head_ref }}
- uses: ./.github/actions/install-risc0 - uses: ./.github/actions/install-risc0