From 46ad09e11722db70f1e26788d49334861a66b0e2 Mon Sep 17 00:00:00 2001 From: James Frank Date: Tue, 7 Oct 2025 06:07:52 -0600 Subject: [PATCH 1/2] (#29) Add workflow permissions Closes #29 --- .github/workflows/shared-workflow.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/shared-workflow.yml b/.github/workflows/shared-workflow.yml index 73d3575..40363bb 100644 --- a/.github/workflows/shared-workflow.yml +++ b/.github/workflows/shared-workflow.yml @@ -14,5 +14,9 @@ on: pull_request: jobs: react-app-workflow: + permissions: + contents: read + packages: read + pull-requests: write uses: nciocpl/cgov-react-app-playground/.github/workflows/workflow.yml@workflow/v3 secrets: inherit From 31f5be9e873441c11bd6a3fcb3fc7149aa2b6b5f Mon Sep 17 00:00:00 2001 From: James Frank Date: Tue, 7 Oct 2025 06:08:10 -0600 Subject: [PATCH 2/2] (#30) Add CM standards check Closes #30 --- .github/workflows/ocpl_cm_standards_check.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .github/workflows/ocpl_cm_standards_check.yml diff --git a/.github/workflows/ocpl_cm_standards_check.yml b/.github/workflows/ocpl_cm_standards_check.yml new file mode 100644 index 0000000..d4c08d9 --- /dev/null +++ b/.github/workflows/ocpl_cm_standards_check.yml @@ -0,0 +1,11 @@ +name: OCPL Configuration Management Standards Check + +on: + pull_request: + types: [opened, reopened, synchronize, ready_for_review] + +jobs: + commitlint_remote: + permissions: + contents: read + uses: nciocpl/.github/.github/workflows/ocpl_cm_standards_check.yml@workflow/v2