Skip to content

Commit

Permalink
fixup: drop artifact feature from codeql workflow
Browse files Browse the repository at this point in the history
PR: binkley#432
Signed-off-by: Sam Gammon <[email protected]>
  • Loading branch information
sgammon committed Jan 7, 2024
1 parent b69e4f3 commit 82655eb
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 13 deletions.
11 changes: 0 additions & 11 deletions .github/workflows/checks.codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,11 +19,6 @@ name: "CodeQL"
- cron: "0 0 * * 1"
workflow_dispatch: {}
workflow_call:
inputs:
artifact:
type: string
description: "Artifact to fetch"
required: false
secrets:
BUILDLESS_APIKEY:
description: "Build cache API key"
Expand Down Expand Up @@ -69,12 +64,6 @@ jobs:
${{ runner.os }}-
- name: "Setup: Buildless"
uses: buildless/setup@30e82389418c7f17046606183bc4c78b2c8913e0 # v1.0.2
- name: "Setup: Download Artifact"
uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 # v4.1.0
if: inputs.artifact != ''
continue-on-error: true
with:
name: ${{ inputs.artifact }}
- name: "Setup: Initialize CodeQL"
uses: github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12
with:
Expand Down
2 changes: 0 additions & 2 deletions .github/workflows/on.pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -142,8 +142,6 @@ jobs:
contents: read
actions: read
security-events: write

Check failure

Code scanning / Scorecard

Token-Permissions High

score is 0: jobLevel 'security-events' permission set to 'write'
Remediation tip: Verify which permissions are needed and consider whether you can reduce them.
Click Remediation section below for further remediation help
with:
artifact: gradle-direct-jvm${{ matrix.java }}-jars

## Scan dependencies for vulnerabilities.
checks-deps-review:
Expand Down

0 comments on commit 82655eb

Please sign in to comment.