mirror of
https://github.com/Sea-Haven-Industries/meal-order-manager.git
synced 2026-09-30 08:53:13 +00:00
09052fa91a
Some checks failed
Deploy / deploy (push) Has been cancelled
* ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #9 and #11 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match. * fix: turn off debug mode in Flask app configuration. Resolves code scanning alert #2 (Flask app is run in debug mode) * ci: bump reusable workflow pin to f71002a (ruff 0.15.22 pin) Picks up Sea-Haven-Industries/.github#88, which pins ruff in ci-python-sam so unpinned installs no longer float to new releases with changed default rule sets (0.16.0 broke CI with 89 pre-existing findings). Refs Sea-Haven-Industries/.github#87.
14 lines
251 B
YAML
14 lines
251 B
YAML
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
ci:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@f71002a9ed2938730b683249b28059c92a081af6 # main
|
|
with:
|
|
run-tests: true
|