mirror of
https://github.com/Sea-Haven-Industries/apm-wo-analysis.git
synced 2026-09-30 03:03:14 +00:00
299ead89b3
Some checks are pending
Deploy / deploy (push) Waiting to run
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching. * ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
19 lines
417 B
YAML
19 lines
417 B
YAML
name: CI
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
ci:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main
|
|
with:
|
|
python-version: "3.12"
|
|
source-dirs: "cdk lambdas tests"
|
|
run-sam-validate: false
|
|
run-cdk-synth: true
|
|
cdk-dir: cdk
|
|
run-tests: true
|
|
enable-qemu: true
|