vrr/goose
2
0
Fork 0
mirror of https://github.com/block/goose.git synced 2026-04-29 20:19:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 37

patching recipe scanning workflows for permissions changes (#4579)

Browse source
This commit is contained in:
w. ian douglas 2025-09-09 13:04:34 -06:00 • committed by GitHub
parent 2080425d9a
commit e575124cc4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
.github/workflows/recipe-security-scanner.yml vendored
View file

@ -13,6 +13,7 @@ concurrency:
permissions:
contents: read
pull-requests: write
issues: write
statuses: write
jobs:
@ -140,6 +141,12 @@ jobs:
# Set permissions for Docker container (scanner user is UID 1000)
sudo chmod -R 777 "$OUT" || true
# Verify secrets are available (without logging details)
if [ -z "$OPENAI_API_KEY" ] || [ -z "$TRAINING_DATA_LOW" ] || [ -z "$TRAINING_DATA_MEDIUM" ] || [ -z "$TRAINING_DATA_EXTREME" ]; then
echo "❌ One or more required secrets are missing or inaccessible"
exit 1
fi
# Initialize overall scan results
echo '{"scanned_recipes": [], "overall_status": "UNKNOWN", "failed_scans": 0}' > "$OUT/pr_scan_summary.json"