[StepSecurity] ci: Harden GitHub Actions #57
JPLachancetest-dependency-review.yml
on: pull_request
Matrix: test
Waiting for pending jobs
Annotations
1 error
|
Invalid workflow file:
.github/workflows/test-dependency-review.yml#L10
The workflow is not valid. .github/workflows/test-dependency-review.yml (Line: 10, Col: 3): Error calling workflow 'coveo/public-actions/.github/workflows/dependency-review.yml@27dde3e8a4d4998a46495009aba49f421f820401'. The workflow is requesting 'contents: read', but is only allowed 'contents: none'. .github/workflows/test-dependency-review.yml (Line: 10, Col: 3): Error calling workflow 'coveo/public-actions/.github/workflows/dependency-review.yml@27dde3e8a4d4998a46495009aba49f421f820401'. The nested job 'dependency-review' is requesting 'contents: read', but is only allowed 'contents: none'.
|