From 3e557328ace03d8bf1869869b1b8631cadab7e3c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 Dec 2023 14:35:40 +0000 Subject: [PATCH 1/2] chore(deps): bump microsoft/security-devops-action from 1.6.0 to 1.10.0 Bumps [microsoft/security-devops-action](https://github.com/microsoft/security-devops-action) from 1.6.0 to 1.10.0. - [Release notes](https://github.com/microsoft/security-devops-action/releases) - [Commits](https://github.com/microsoft/security-devops-action/compare/v1.6.0...v1.10.0) --- updated-dependencies: - dependency-name: microsoft/security-devops-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/defender-for-devops.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/defender-for-devops.yml b/.github/workflows/defender-for-devops.yml index d57c81f..f443458 100644 --- a/.github/workflows/defender-for-devops.yml +++ b/.github/workflows/defender-for-devops.yml @@ -40,7 +40,7 @@ jobs: 5.0.x 6.0.x - name: Run Microsoft Security DevOps - uses: microsoft/security-devops-action@v1.6.0 + uses: microsoft/security-devops-action@v1.10.0 id: msdo with: tools: antimalware, terrascan, trivy, templateanalyzer From c8a5584d32fcb3d3ec632707f9cdda9b5db7b642 Mon Sep 17 00:00:00 2001 From: "Geodecki 2P gr.1" <113300767+1p22geo@users.noreply.github.com> Date: Mon, 25 Dec 2023 15:38:46 +0100 Subject: [PATCH 2/2] ci: permissions --- .github/workflows/playwright.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index 88b58c2..ae8f356 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -1,4 +1,6 @@ name: End-to-end tests and smoke tests +permissions: + statuses: write on: push: workflow_dispatch: