arpitjain099 opened a new pull request, #40069:
URL: https://github.com/apache/superset/pull/40069
### SUMMARY
Add explicit `GITHUB_TOKEN` permissions to the remaining release/docs
workflows that were still relying on repository defaults:
- `.github/workflows/release.yml`
- `permissions: { contents: read }`
- `.github/workflows/superset-docs-deploy.yml`
- `permissions: { contents: read, actions: read }`
- `.github/workflows/superset-docs-verify.yml`
- `permissions: { contents: read, actions: read }`
`actions: read` is included for the docs workflows because they download
artifacts from other workflow runs.
### BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF
Not applicable.
### TESTING INSTRUCTIONS
- Validated YAML parsing for edited files with `python3` + `yaml.safe_load`.
- Ran required hook command:
`/Users/arpitjain/Library/Python/3.9/bin/pre-commit run --all-files`.
- In this environment, several hooks fail due missing local toolchain
dependencies (`yarn`, `ruff`, `tscw-config`, `helm-docs`) plus Python
interpreter mismatch for some hooks.
- Any unrelated auto-edits from those hooks were reverted; only the
workflow permission changes are included in this PR.
### ADDITIONAL INFORMATION
- [ ] Has associated issue:
- [ ] Required feature flags:
- [ ] Changes UI
- [ ] Includes DB Migration (follow approval process in
[SIP-59](https://github.com/apache/superset/issues/13351))
- [ ] Migration is atomic, supports rollback & is backwards-compatible
- [ ] Confirm DB migration upgrade and downgrade tested
- [ ] Runtime estimates and downtime expectations provided
- [ ] Introduces new feature or API
- [ ] Removes existing feature or API
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
