From 9f5440ab2a3242fd80a243a57e69628a36e2909f Mon Sep 17 00:00:00 2001 From: Beq Date: Wed, 25 Sep 2024 22:58:54 +0100 Subject: [PATCH] [build] Avoid dependabot nag and add github_token GITHUB_TOKEN environment variable was added to the 'Get run info' step for secure access to GitHub resources. --- .github/workflows/tag-fs-build.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/tag-fs-build.yml b/.github/workflows/tag-fs-build.yml index c2026f9cdb..621bd59e32 100644 --- a/.github/workflows/tag-fs-build.yml +++ b/.github/workflows/tag-fs-build.yml @@ -38,7 +38,7 @@ jobs: steps: # Step 1: Checkout the Repository - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: fetch-depth: 0 # Necessary to fetch all history for tagging @@ -50,6 +50,8 @@ jobs: - name: Get run info id: get_run_info uses: octokit/request-action@v2.x + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: route: GET /repos/{owner}/{repo}/actions/runs/{run_id} owner: ${{ github.repository_owner }}