diff --git a/.github/workflows/ci-security.yml b/.github/workflows/ci-security.yml index 6dd80b8f54..ee8c4d54ae 100644 --- a/.github/workflows/ci-security.yml +++ b/.github/workflows/ci-security.yml @@ -6,7 +6,11 @@ on: - dev - master pull_request_target: - types: [opened, reopened, labeled, synchronize] + types: + - opened + - reopened + - labeled + - synchronize branches: - dev - master @@ -20,8 +24,6 @@ jobs: name: Check CI Clearance if: github.event_name == 'pull_request_target' && (github.event.pull_request.head.repo.id != github.event.pull_request.base.repo.id || github.event.pull_request.user.id == 49699333) && github.event.pull_request.state == 'open' runs-on: ubuntu-latest - permissions: - pull-requests: write steps: - name: Generate App Token id: app-token-generation diff --git a/.github/workflows/rerun-flaky-tests.yml b/.github/workflows/rerun-flaky-tests.yml index 6b36c28751..c4181fa870 100644 --- a/.github/workflows/rerun-flaky-tests.yml +++ b/.github/workflows/rerun-flaky-tests.yml @@ -1,4 +1,4 @@ -name: Rerun Flaky Live Tests +name: Rerun Flaky Tests on: workflow_run: workflows: ["CI Pipeline", "CI Security"] diff --git a/.github/workflows/size-label.yml b/.github/workflows/size-label.yml index 69b51c5e52..7ab774153c 100644 --- a/.github/workflows/size-label.yml +++ b/.github/workflows/size-label.yml @@ -1,6 +1,10 @@ name: Size Labelling on: pull_request_target: + types: + - reopened + - labeled + - synchronize concurrency: group: "size-labelling-${{ github.head_ref || github.run_id }}-${{ github.event_name }}" @@ -9,9 +13,6 @@ concurrency: jobs: size-label: name: Add Size Label - permissions: - contents: read - pull-requests: write runs-on: ubuntu-latest steps: - name: Generate App Token diff --git a/.github/workflows/update-ss13-org-mirror.yml b/.github/workflows/update-ss13-org-mirror.yml index 175bffcd60..1c53bf94a6 100644 --- a/.github/workflows/update-ss13-org-mirror.yml +++ b/.github/workflows/update-ss13-org-mirror.yml @@ -21,6 +21,7 @@ jobs: id: app-token-generation uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc with: + repository: spacestation13/tgstation-server app_id: ${{ secrets.APP_ID }} private_key: ${{ secrets.APP_PRIVATE_KEY }}