Skip to content

ci: update WELCOME-NEW-USERS workflow from global .github repo Signed-off-by: microcks-bot <info@microcks.io> #163

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yada merged 1 commit into from
Mar 25, 2026
+5 −2
Merged

ci: update WELCOME-NEW-USERS workflow from global .github repo Signed-off-by: microcks-bot <info@microcks.io> #163

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions .github/workflows/welcome-new-users.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,9 @@ on:
pull_request:
types: [opened, closed]

# Explicitly disable all default GITHUB_TOKEN permissions at the workflow level.
# Each job then declares only the minimal required permissions (principle of least privilege),
# e.g., `issues: write` for posting comments. This improves security, especially for PRs from forks.
permissions: {}

jobs:
Expand Down Expand Up @@ -46,7 +49,7 @@ jobs:
if: github.event_name == 'pull_request' && github.event.action == 'opened'
runs-on: ubuntu-latest
permissions:
pull-requests: write
issues: write
steps:
- uses: wow-actions/welcome@68019c2c271561f63162fea75bb7707ef8a02c85 # To pin v1.3.1
with:
Expand All @@ -64,7 +67,7 @@ jobs:
if: github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged == true
runs-on: ubuntu-latest
permissions:
pull-requests: write
issues: write
steps:
- uses: wow-actions/welcome@68019c2c271561f63162fea75bb7707ef8a02c85 # To pin v1.3.1
with:
Expand Down
Loading