/
githubmirror
/
compose
Обзор
Документация
Войти
/
githubmirror
/
compose
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
.github/workflows/pr-review.yml
32 строки
1 KB
dependabot[bot]
build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
03 авг 2026, 13:03
03 авг 2026, 13:03
e9a26b6
Код
Авторство
О чём код?
name: PR Review permissions: contents: read # Required at top-level to give `issue_comment` events access to the secrets below. # workflow_run is used deliberately here: the unprivileged "PR Review - Trigger" # workflow runs on the fork PR and this privileged one only consumes its # artifacts, never checks out or executes fork code. on: # zizmor: ignore[dangerous-triggers] issue_comment: types: [ created ] workflow_run: workflows: [ "PR Review - Trigger" ] types: [ completed ] jobs: review: if: | github.event_name == 'issue_comment' || github.event.workflow_run.conclusion == 'success' uses: docker/docker-agent-action/.github/workflows/review-pr.yml@baf90543d81f5de59751dfd10e6cf45e21a5a982 # v2.0.3 # Scoped to the job so other jobs in this workflow aren't over-permissioned permissions: contents: read # Read repository files and PR diffs pull-requests: write # Post review comments issues: write # Create security incident issues if secrets detected checks: write # (Optional) Show review progress as a check run id-token: write # Required for OIDC authentication to AWS Secrets Manager actions: read # Download artifacts from trigger workflow with: trigger-run-id: ${{ github.event_name == 'workflow_run' && format('{0}', github.event.workflow_run.id) || '' }}