From bba8bfec21d26bc06fe25a3b2ecb827b80fc0fb1 Mon Sep 17 00:00:00 2001
From: Jacek Kowalski <Jacek@jacekk.info>
Date: Wed, 28 Jun 2023 10:55:12 +0000
Subject: [PATCH] GitHub Actions: add "contents: write" permission for update-deps job
---
.github/workflows/update-deps.yml | 20 ++++++++++++++------
1 files changed, 14 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
index 8ec2741..1394bf8 100644
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -5,10 +5,15 @@
name: Update dependencies
+permissions: {}
+
jobs:
update:
name: Update dependencies
runs-on: ubuntu-latest
+ permissions:
+ contents: write
+ pull-requests: write
steps:
- id: checkout
name: Checkout code
@@ -29,20 +34,23 @@
- id: vars
name: Get project variables
run: |
- echo -n "::set-output name=versionUpdated::"
- [ -f pom.xml.versionsBackup ] && echo 1 || echo 0
- echo -n "::set-output name=keycloakVersion::"
- mvn -q help:evaluate -Dexpression=keycloak.version -DforceStdout 2> /dev/null | grep -E '^[0-9a-zA-Z.-]+$'
+ if [ -f pom.xml.versionsBackup ]; then
+ echo "versionUpdated=1"
+ else
+ echo "versionUpdated=0"
+ fi >> $GITHUB_OUTPUT
+ echo -n "keycloakVersion=" >> $GITHUB_OUTPUT
+ mvn -q help:evaluate -Dexpression=keycloak.version -DforceStdout 2> /dev/null | grep -E '^[0-9a-zA-Z.-]+$' >> $GITHUB_OUTPUT
- id: check_branch
name: Check if branch exists
run: |
- echo -n "::set-output name=commit::"
+ echo -n "commit=" >> $GITHUB_OUTPUT
if [ '${{ steps.vars.outputs.versionUpdated }}' == '1' ]; then
git ls-remote origin 'feature/keycloak-update-${{ steps.vars.outputs.keycloakVersion }}'
else
git rev-parse HEAD
- fi
+ fi >> $GITHUB_OUTPUT
- id: reset_repo
name: Reset repository
--
Gitblit v1.9.1