Conversation
- fix publish-feature.yml - delete unnecessary publish latest settings - fix create-release-pr.yml
- add toTag flag - use ignorePreReleases flag
use spring 150
| name: Deploy documentations [Feature] | ||
| uses: ./.github/workflows/documentation-deploy-common.yml | ||
| with: | ||
| path: 'next-insol' | ||
| ref: 'next-insol' | ||
| docusaurusURLPrefix: 'next-insol' | ||
| secrets: inherit |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium documentation
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI about 2 months ago
In general, this issue is fixed by adding an explicit permissions: block either at the workflow root (applies to all jobs without their own permissions) or at the specific job that needs restricted GITHUB_TOKEN access. The block should grant only the scopes required for the workflow to run; if in doubt and the workflow only needs to read repository contents, a minimal safe default is contents: read.
For this workflow, the job simply calls a reusable workflow to deploy documentation. The caller itself does not appear to perform any direct API operations, and a conservative baseline is appropriate. The best fix without changing existing behavior is to add a permissions block at the top level of the workflow (aligned with on: and jobs:) that sets contents: read. This explicitly documents and constrains the token permissions while still allowing read access that reusable workflows commonly need to fetch code or configuration. No imports or additional definitions are required; we only modify the YAML in .github/workflows/documentation-deploy-next-insol-stage.yml.
Concretely, you should insert:
permissions:
contents: readbetween the name: and on: keys, preserving the existing indentation style.
| @@ -1,4 +1,6 @@ | ||
| name: Deploy documentations [Feature] | ||
| permissions: | ||
| contents: read | ||
|
|
||
| on: | ||
| workflow_dispatch: |
|
Theme Builder app deployed! https://plasma.sberdevices.ru/pr/plasma-theme-builder-pr-2515/ |
Core
TextField-like
PR
Range, DatePicker
contentRightв соответствие с макетамиPR
List
PR
PR
Tree
PR
H6
PR
Select, Combobox
renderSelectionIconдля указания своей иконки выбораPR
flipиshiftдля коррекции позиции выпадающего списка при достижении границ экранаPR
Tabs
disabledдляTabItemPR
TextArea
PR
Attach
AttachPropsPR
Table
PR
SDDS-FINAI
ButtonGroup
gapc 2 px to 4px дляintersections:gap: denseиshape: defaultPR
Autocomplete, Combobox, DatePicker, DateTimePicker, TimePicker
readOnlyPR
Popover, Tooltip (Beta)
portalдля настройки рендера выпадающего списка в DOMPR
Skeleton
изменен токен градиента для светлой темы
добавлен новое скругление -
4pxPR
PLASMA-WEB
TextFieldSlider
PR
Autocomplete, Combobox, DatePicker, DateTimePicker, Range, Select, TextField
readOnlyPR
Tokens
readOnlyв группыoutlinePR
SDDS-INSOL
DateTimePicker
readOnlyPR
SDDS-CS
DatePicker
readOnlyPR
TimePicker
PR
PLASMA-B2C
TextFieldSlider
PR
Tokens
readOnlyв группыsurfacePR
PLASMA-GIGA
TextFieldSlider
PR
Tokens
readOnlyв группыsurfacePR
SDDS-SCAN
TextFieldSlider
PR
SDDS-SERV
TextFieldSlider
PR
SDDS-DFA
TextFieldSlider
PR
SDDS-BIZCOM
TextFieldSlider
PR
SDDS-NETOLOGY
TextFieldSlider
PR