Skip to content

nightly

nightly #49

Workflow file for this run

name: nightly
permissions: {}
on:
schedule:
- cron: "30 1 * * *"
defaults:
run:
shell: bash
jobs:
build:
uses: ./.github/workflows/.reusable-build.yml
permissions:
id-token: write
packages: write
secrets: inherit
with:
skip: "non-required"
compliance:

Check failure on line 23 in .github/workflows/nightly.yaml

View workflow run for this annotation

GitHub Actions / nightly

Invalid workflow file

The workflow is not valid. .github/workflows/nightly.yaml (Line: 23, Col: 3): Error calling workflow 'sse-secure-systems/semgr8s/.github/workflows/.reusable-compliance.yml@2e0f506faa3579dbb09f8e597f4d19eb478e4952'. The nested job 'ossf-scorecard' is requesting 'pull-requests: write', but is only allowed 'pull-requests: read'. .github/workflows/nightly.yaml (Line: 23, Col: 3): Error calling workflow 'sse-secure-systems/semgr8s/.github/workflows/.reusable-compliance.yml@2e0f506faa3579dbb09f8e597f4d19eb478e4952'. The nested job 'dependency-review' is requesting 'pull-requests: write', but is only allowed 'pull-requests: read'.
uses: ./.github/workflows/.reusable-compliance.yml
permissions:
actions: read
checks: read
contents: write
deployments: read
discussions: read
id-token: write
issues: read
packages: read
pages: read
pull-requests: read
repository-projects: read
security-events: write
statuses: read
secrets: inherit
with:
skip: "none"
sca-released:
name: sca (released)
uses: ./.github/workflows/.reusable-sca.yml
needs: [build]
permissions:
contents: write
security-events: write
packages: read
secrets: inherit
with:
image: ${{ needs.build.outputs.original_image }}
skip: "none"
output: "table"
integration-test:
uses: ./.github/workflows/.reusable-integration-test.yml
needs: [build]
permissions:
packages: read
secrets: inherit
with:
build_registry: ${{ needs.build.outputs.original_registry }}
repo_owner: ${{ github.repository_owner }}
build_image_repository: ${{ needs.build.outputs.original_registry }}/${{ needs.build.outputs.original_repo }}
build_tag: ${{ needs.build.outputs.original_tag }}
skip: "non-required"
cleanup-registry:
uses: ./.github/workflows/.reusable-cleanup-registry.yml
needs: [build]
secrets: inherit