Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .github/workflows/build-test.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
name: Build Test

permissions:
contents: read

on: [pull_request]

jobs:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/deploy-docs.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
name: Deploy to GitHub Pages

permissions:
contents: write

on:
push:
branches:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/deploy_wp_plugin_develop.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,9 @@

name: Release develop WP Plugin

permissions:
contents: write

on:
push:
branches:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/deploy_wp_plugin_stable.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,9 @@ name: Release Stable WP Plugin

### This has been merged into release-latest-version action

permissions:
contents: write

on:
push:
branches:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/eslint.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
name: eslint

permissions:
contents: read

on: [pull_request]

jobs:
Expand Down
4 changes: 4 additions & 0 deletions .github/workflows/nextjs_bundle_analysis-app-router.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
name: '(App Router) Next.js Bundle Analysis'

permissions:
contents: read
pull-requests: write
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing actions: read permission for artifact download

High Severity

The App Router bundle analysis workflow is missing the actions: read permission required by dawidd6/action-download-artifact@v6 to download artifacts from other workflow runs. The Pages Router version of this workflow correctly includes actions: read, but it was omitted here. Without this permission, the "Download base branch bundle stats" step will fail, breaking the bundle comparison feature.

Fix in Cursor Fix in Web


on:
pull_request:
push:
Expand Down
6 changes: 6 additions & 0 deletions .github/workflows/nextjs_bundle_analysis.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,11 @@
name: '(Pages Router) Next.js Bundle Analysis'

permissions:
contents: read
actions: read
pull-requests: write
issues: write

on:
pull_request:
push:
Expand Down
4 changes: 4 additions & 0 deletions .github/workflows/npm-release-next-version.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
name: Release @next

permissions:
contents: write
pull-requests: write

on:
push:
branches:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/phpcs.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
name: PHPCS check

permissions:
contents: read

on: pull_request

jobs:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/phpunit.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
name: PHPUnit tests

permissions:
contents: read

on: pull_request

jobs:
Expand Down
4 changes: 4 additions & 0 deletions .github/workflows/release-latest-version.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
name: Release @latest

permissions:
contents: write
pull-requests: write

on:
push:
branches:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/unit-tests.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
name: unit tests

permissions:
contents: read

on: [pull_request]

jobs:
Expand Down
Loading