Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| name: Run linters | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - name: Check out Git repository | ||
| uses: actions/checkout@v5 | ||
|
|
||
| - name: Set up Node.js | ||
| uses: actions/setup-node@v5 | ||
| with: | ||
| node-version: 22 | ||
|
|
||
| # ESLint and Prettier must be in `package.json` | ||
| - name: Install Node.js dependencies | ||
| run: yarn install --frozen-lockfile | ||
|
|
||
| - name: Run linters | ||
| uses: wearerequired/lint-action@v2.3.0 | ||
| with: | ||
| eslint: true | ||
| prettier: true |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 3 months ago
To fix the problem, add a permissions block to restrict the GITHUB_TOKEN privileges for the job. For this workflow and job, setting permissions: contents: read at the job level is typically sufficient for linting tasks, which only need to read repository files and do not need to push, modify, or create artifacts/issues/pull-requests. To implement this, add the following block directly under the job definition line (run-linters:) and above runs-on: ubuntu-latest. No imports, definitions, or additional methods are needed. Adjust the indentation so that it matches the current job indentation.
| @@ -3,6 +3,8 @@ | ||
| jobs: | ||
| run-linters: | ||
| name: Run linters | ||
| permissions: | ||
| contents: read | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: |
jfmath04
left a comment
jfmath04
left a comment
There was a problem hiding this comment.
Nice work, looks very good! Just run linting and prettier to fix those errors. Also, add the package.json and yarn.lock files since you added a new package.
jfmath04
left a comment
jfmath04
left a comment
There was a problem hiding this comment.
The infinite scroll looks good! Let's remove the package-lock.json file though. Also run yarn build and fix any errors you see from that.
ZhaoSongZh7
left a comment
ZhaoSongZh7
left a comment
There was a problem hiding this comment.
Infinite scroll looks good on the website and code changes look good!
3 participants
No description provided.