Conversation
- fix publish-feature.yml - delete unnecessary publish latest settings - fix create-release-pr.yml
…` and `plasma_giga` themes
use spring 150
| name: Deploy documentations [Feature] | ||
| uses: ./.github/workflows/documentation-deploy-common.yml | ||
| with: | ||
| path: 'next-insol' | ||
| ref: 'next-insol' | ||
| docusaurusURLPrefix: 'next-insol' | ||
| secrets: inherit |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium documentation
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI about 2 months ago
In general, the fix is to add an explicit permissions block to the workflow (or to the specific job) that grants only the minimal access the workflow needs. For most documentation deployment workflows that only need to read the repository content and maybe fetch packages, starting with contents: read (and optionally packages: read if required) is a safe, minimal baseline.
For this specific file, the cleanest fix without changing existing behavior is to define a top-level permissions block, applying to all jobs in this workflow, directly under the on: section and before jobs:. This keeps the job definition unchanged and makes the permissions explicit. As we cannot see inside documentation-deploy-common.yml, we choose a conservative minimal set: contents: read. If the reusable workflow actually requires write access (for example, to push to gh-pages), that would normally be reflected there; here we just establish a secure default. No imports or additional methods are needed; this is a pure YAML change.
Concretely: in .github/workflows/documentation-deploy-next-insol-stage.yml, add:
permissions:
contents: readbetween the on: block and the jobs: block (e.g., after line 5 and before line 6). Indentation should match the existing style (4 spaces under the root keys).
| @@ -3,6 +3,9 @@ | ||
| on: | ||
| workflow_dispatch: | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| run: | ||
| name: Deploy documentations [Feature] |
|
Theme Builder app deployed! https://plasma.sberdevices.ru/pr/plasma-theme-builder-pr-2514/ |
Core
TextField
PR
Range, DatePicker
contentRightсоответствует макетам и наследуется отEmbedIconButtonPR
List
PR
ListItemPR
Tree
PR
Typography
h6PR
Select, Combobox
renderSelectionIconдля кастомизации иконки выбора элемента;PR
flipиshiftдля коррекции позиции выпадающего списка при достижении границ экрана;PR
Tabs
disabledдляTabItemPR
TextArea
PR
Attach
AttachPropsPR
Table
PR
TextFieldSlider
TextFieldSliderPR
SDDS-FINAI
ButtonGroup
gapc 2 px to 4px дляintersections:gap: denseиshape: defaultPR
Autocomplete, Combobox, DatePicker, DateTimePicker, TimePicker
readOnlyPR
Popover, Tooltip (Beta)
portalдля настройки рендера выпадающего списка в DOM;PR
Skeleton
изменен токен градиента для светлой темы
добавлен новое скругление -
4pxPR
PLASMA-WEB
Autocomplete, Combobox, DatePicker, DateTimePicker, Range, Select, TextField
readOnlyPR
Tokens
readOnlyв группыoutlinePR
SDDS-INSOL
DateTimePicker
readOnlyPR
SDDS-CS
DatePicker
readOnlyPR
TimePicker
PR
PLASMA-B2C
Tokens
readOnlyв группыsurfacePR
PLASMA-GIGA
Tokens
readOnlyв группыsurfacePR