mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-07-12 18:00:37 +00:00
fix: resolve workflow YAML syntax and implement security safety reset
- Removed conflictive 'workflows: write' permission. - Added 'Safety Reset for Workflow Files' step to prevent GHA from trying to self-modify configuration files during the PR sync. - This ensures the PR will only contain technical metadata and V2 documentation, avoiding permission rejections.
This commit is contained in:
6
.github/workflows/agentic_v2_builder.yml
vendored
6
.github/workflows/agentic_v2_builder.yml
vendored
@@ -25,7 +25,6 @@ on:
|
||||
permissions:
|
||||
contents: write
|
||||
pull-requests: write
|
||||
workflows: write
|
||||
|
||||
concurrency:
|
||||
group: v2-builder-${{ github.ref }}
|
||||
@@ -91,6 +90,11 @@ jobs:
|
||||
python src/readme_updater.py
|
||||
python src/safety_readme.py
|
||||
|
||||
- name: Safety Reset for Workflow Files (Security)
|
||||
run: |
|
||||
# Prevent security rejection by ensuring no workflow YAMLs are part of the PR
|
||||
git checkout HEAD -- .github/workflows/
|
||||
|
||||
- name: Create Pull Request for V2 Elite Update
|
||||
id: cpr
|
||||
uses: peter-evans/create-pull-request@v8
|
||||
|
||||
Reference in New Issue
Block a user