Skip to content

Conversation

@thpierce
Copy link
Contributor

Potential fix for https://github.com/aws/aws-xray-sdk-node/security/code-scanning/1

To resolve the issue, you should add an explicit permissions block to the workflow. Since this workflow does not interact with issues, pull requests, or other repository resources beyond possibly reading source code (if at all), the minimal permissions of contents: read suffice. This can be placed at the root level, making it apply to all jobs (unless overridden in a job block). The change is to add:

permissions:
  contents: read

directly after the name or on key, near the start of the workflow file .github/workflows/deprecate_version.yml. No additional library imports or workflow structure changes are required.


Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@codecov-commenter
Copy link

codecov-commenter commented Oct 14, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.31%. Comparing base (0963c1a) to head (f669867).
⚠️ Report is 18 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #729   +/-   ##
=======================================
  Coverage   84.31%   84.31%           
=======================================
  Files          36       36           
  Lines        1817     1817           
=======================================
  Hits         1532     1532           
  Misses        285      285           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@thpierce thpierce marked this pull request as ready for review October 14, 2025 16:48
@thpierce thpierce requested a review from a team as a code owner October 14, 2025 16:48
@thpierce thpierce merged commit da1d83d into master Oct 14, 2025
15 checks passed
@thpierce thpierce deleted the alert-autofix-1 branch October 14, 2025 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants