mirror of
https://github.com/openobserve/openobserve.git
synced 2026-11-05 16:10:43 +00:00
Prabhat Sharma
c451db0835
## Summary - set explicit least-privilege permissions for audit, JavaScript license, and release workflows while preserving release-job write access - grant the spam-cleaner workflow the issue and pull-request scopes required to delete comments - escape quotes and backslashes before interpolating log toast text into CSS attribute selectors ## Validation - parsed the four modified workflow files as YAML - ran Node syntax checking on tests/ui-testing/pages/logsPages/logsPage.js - ran git diff whitespace validation
26 lines
500 B
YAML
26 lines
500 B
YAML
name: Security audit
|
|
on:
|
|
push:
|
|
paths-ignore:
|
|
- "**.md"
|
|
- "**.yml"
|
|
- "**.yaml"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
security_audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
- uses: taiki-e/install-action@v2.85.10
|
|
with:
|
|
tool: cargo-audit
|
|
- name: run cargo audit
|
|
run: cargo audit
|