try to fix runtime permissions to writing to temp file

levibostian · Aug 31, 2024 · 04f7e01 · 04f7e01
1 parent 9dd4370
commit 04f7e01
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -14,7 +14,7 @@ jobs:
         deno-version: v1.x
 
     - name: Run Deno tests
-      run: deno test --allow-env --allow-run --junit-path reports/junit.xml
+      run: deno test --allow-env --allow-run --allow-write --junit-path reports/junit.xml
 
     - name: Upload test results
       uses: actions/upload-artifact@v2

diff --git a/action.yml b/action.yml
@@ -23,7 +23,7 @@ runs:
 
     - name: Run deployment tool 
       # Deno's runtime permissions are a great feature. It would be nice to take advantage of it, however, it may not be possible with future features like running plugins. 
-      run: deno run --allow-env=GITHUB_REF,DRY_RUN,GITHUB_REPOSITORY,INPUT_GITHUB_TOKEN,INPUT_DEPLOY_COMMANDS --allow-net="api.github.com" --allow-run https://raw.githubusercontent.com/levibostian/new-deployment-tool/${{ inputs.version }}/deploy.ts
+      run: deno run --allow-env=GITHUB_REF,DRY_RUN,GITHUB_REPOSITORY,INPUT_GITHUB_TOKEN,INPUT_DEPLOY_COMMANDS,TMPDIR --allow-net="api.github.com" --allow-run --allow-write="$TMPDIR" https://raw.githubusercontent.com/levibostian/new-deployment-tool/${{ inputs.version }}/deploy.ts
       shell: bash 
       env:
         INPUT_GITHUB_TOKEN: ${{ inputs.github_token }}