<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/python-coveragepy-git.git/.github/workflows/cancel.yml, branch 6.4</title>
<subtitle>github.com: nedbat/coveragepy.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-coveragepy-git.git/'/>
<entry>
<title>build: Set permissions for GitHub actions (#1369)</title>
<updated>2022-05-03T09:33:34+00:00</updated>
<author>
<name>Naveen</name>
<email>172697+naveensrinivasan@users.noreply.github.com</email>
</author>
<published>2022-05-03T09:33:34+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-coveragepy-git.git/commit/?id=9ef7d3c4b1fc451bee5a18b10b74f4cabb1e048d'/>
<id>9ef7d3c4b1fc451bee5a18b10b74f4cabb1e048d</id>
<content type='text'>
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen &lt;172697+naveensrinivasan@users.noreply.github.com&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen &lt;172697+naveensrinivasan@users.noreply.github.com&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>build(deps): bump styfle/cancel-workflow-action from 0.6.0 to 0.9.1</title>
<updated>2022-01-17T19:48:47+00:00</updated>
<author>
<name>dependabot[bot]</name>
<email>49699333+dependabot[bot]@users.noreply.github.com</email>
</author>
<published>2022-01-17T18:51:16+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-coveragepy-git.git/commit/?id=26678262c2f0cf2b8a619dd1e60600d241aae2aa'/>
<id>26678262c2f0cf2b8a619dd1e60600d241aae2aa</id>
<content type='text'>
Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) from 0.6.0 to 0.9.1.
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)
- [Commits](https://github.com/styfle/cancel-workflow-action/compare/0.6.0...0.9.1)

---
updated-dependencies:
- dependency-name: styfle/cancel-workflow-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] &lt;support@github.com&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) from 0.6.0 to 0.9.1.
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)
- [Commits](https://github.com/styfle/cancel-workflow-action/compare/0.6.0...0.9.1)

---
updated-dependencies:
- dependency-name: styfle/cancel-workflow-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] &lt;support@github.com&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>style: fix typos discovered by codespell (#1197)</title>
<updated>2021-08-01T10:52:42+00:00</updated>
<author>
<name>Christian Clauss</name>
<email>cclauss@me.com</email>
</author>
<published>2021-08-01T10:52:42+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-coveragepy-git.git/commit/?id=f3059761830a0716504b04d25a4045c2f4ef4402'/>
<id>f3059761830a0716504b04d25a4045c2f4ef4402</id>
<content type='text'>
python3 -m pip install codespell

codespell --ignore-words-list="ba,cant,datas,hart,linke,ned,nin,overthere,upto" --skip="*.js"

* Fix typos discovered by codespell

* datas

* intgers ==&gt; integers</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
python3 -m pip install codespell

codespell --ignore-words-list="ba,cant,datas,hart,linke,ned,nin,overthere,upto" --skip="*.js"

* Fix typos discovered by codespell

* datas

* intgers ==&gt; integers</pre>
</div>
</content>
</entry>
<entry>
<title>build: make yaml syntax more uniform</title>
<updated>2021-02-25T11:22:31+00:00</updated>
<author>
<name>Ned Batchelder</name>
<email>ned@nedbatchelder.com</email>
</author>
<published>2021-02-25T02:01:55+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-coveragepy-git.git/commit/?id=6c802eabcc79c0995ea7bde307527cf13f5f6a8c'/>
<id>6c802eabcc79c0995ea7bde307527cf13f5f6a8c</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Auto-cancel workflows when pushing to a branch</title>
<updated>2020-12-05T19:07:53+00:00</updated>
<author>
<name>Ned Batchelder</name>
<email>ned@nedbatchelder.com</email>
</author>
<published>2020-12-05T18:22:46+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-coveragepy-git.git/commit/?id=802f60c8df2034913db242323a8d0b3a15abe5eb'/>
<id>802f60c8df2034913db242323a8d0b3a15abe5eb</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
