nas/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-10-31 12:24:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

security: scope shadow workflow permissions

Browse Source
This commit is contained in:
moviepilot-codex[bot]
2026-09-21 02:37:01 +08:00
parent a25b743b65
commit fa2012d1a4
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
.github/workflows/moviepilot-codex-run.yml vendored
View File

@@ -28,12 +28,16 @@ on:
permissions:
contents: read
issues: write
issues: read
pull-requests: read
jobs:
shadow:
if: ${{ vars.CODEX_ENABLED == 'true' && vars.CODEX_PUBLISH_COMMENTS != 'true' }}
permissions:
contents: read
issues: read
pull-requests: read
uses: jxxghp/MoviePilot-Maintenance/.github/workflows/codex-event.yml@main
with:
control_repository: jxxghp/MoviePilot-Maintenance
@@ -56,6 +60,10 @@ jobs:
propose:
if: ${{ vars.CODEX_ENABLED == 'true' && vars.CODEX_PUBLISH_COMMENTS == 'true' }}
permissions:
contents: read
issues: write
pull-requests: read
uses: jxxghp/MoviePilot-Maintenance/.github/workflows/codex-propose.yml@main
with:
control_repository: jxxghp/MoviePilot-Maintenance