Commit graph

9 commits

Author SHA1 Message Date
Josh Soref
effb58fc63 infra/workflow: Reduce workflow permissions
By explicitly listing the permissions required in general, repositories
without restrictive permissions will only allocate the specified
permissions which is much safer than the default, fairly wide,
permissions grant.

Most workflows don't appear to need any permissions beyond
`contents: read` which is required for checkout (when a repository is
private). By specifying this permission, it tells GitHub not to include
any of its additional default permissions (when a repository is
configured permissively).

The .github/workflows/memcheck_*.sh scripts called by build_ubuntu.yml
require write permissions in order to post their output to a pull
request (as a comment).

In locked down GitHub repositories, unless a workflow/job asks for
write permissions, it will not have them and such API calls will result
in:

{
  "message": "Resource not accessible by integration",
  "documentation_url": "https://docs.github.com/rest/issues/comments#create-an-issue-comment",
  "status": "403"
}

By specifically requesting the permissions, the workflow will continue
to work as expected.
2024-07-03 13:17:10 +09:00
Josh Soref
e061fa6628
common: fix 178+ spelling errors 2024-07-01 21:58:46 +09:00
Hermet Park
24a09896d0 infra/workflow: includes the gl engine build test. 2024-06-21 16:28:20 +09:00
Rafał Mikrut
25e6539ea7 Better regression testing 2024-03-20 12:09:48 +09:00
Hermet Park
cc868e2248 infra: fix git-action ios break 2023-11-16 15:37:30 +09:00
Hermet Park
8a5418ed8b infra: add android CI build test with necessary cross build config. 2023-10-09 20:24:07 +09:00
Hermet Park
b69c3b1af3 infra/gitaction: fix a broken macos/ios CI build. 2023-10-09 15:39:59 +09:00
Hermet Park
4c3cdb38b5 infra: migrate cross files into one folder. 2023-10-09 15:39:59 +09:00
Hermet Park
4dfee84148 infra/ios: added basic CI git action workflow. 2023-10-04 12:24:42 +09:00