Commits

Tim Donohue authored and GitHub committed e50c278497f Merge
Merge pull request #1938 from tdonohue/harden_github_workflows

GitHub Workflows security hardening (for dspace-angular)
No tags
gidlmaster

.github/workflows/build.yml

Modified
1 1 # DSpace Continuous Integration/Build via GitHub Actions
2 2 # Concepts borrowed from
3 3 # https://docs.github.com/en/free-pro-team@latest/actions/guides/building-and-testing-nodejs
4 4 name: Build
5 5
6 6 # Run this Build for all pushes / PRs to current branch
7 7 on: [push, pull_request]
8 8
9 +permissions:
10 + contents: read # to fetch code (actions/checkout)
11 +
9 12 jobs:
10 13 tests:
11 14 runs-on: ubuntu-latest
12 15 env:
13 16 # The ci step will test the dspace-angular code against DSpace REST.
14 17 # Direct that step to utilize a DSpace REST service that has been started in docker.
15 18 DSPACE_REST_HOST: localhost
16 19 DSPACE_REST_PORT: 8080
17 20 DSPACE_REST_NAMESPACE: '/server'
18 21 DSPACE_REST_SSL: false

Everything looks good. We'll let you know here if there's anything you should know about.

Add shortcut