From 99e567989e97f689211b3f10aa796a4a4f96c196 Mon Sep 17 00:00:00 2001 From: Nicola Biancolini Date: Thu, 30 Oct 2025 08:17:43 +0100 Subject: [PATCH 1/2] fix: ship content permission --- .github/workflows/ship.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ship.yml b/.github/workflows/ship.yml index 70cdcaa..8042552 100644 --- a/.github/workflows/ship.yml +++ b/.github/workflows/ship.yml @@ -1,6 +1,6 @@ name: ship permissions: - contents: read + contents: write pull-requests: write on: From c5aa15dc0055db1281b6d1b832753520e363e0a7 Mon Sep 17 00:00:00 2001 From: binick Date: Thu, 30 Oct 2025 08:52:13 +0100 Subject: [PATCH 2/2] ci: upload sarif --- .github/workflows/build.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index ba86acb..bec2119 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -61,10 +61,16 @@ jobs: ' $(find artifacts/test-results/a11y -type f -name '*.sarif') > artifacts/test-results/a11y.sarif if: always() + - name: Gather SARIF files + run: | + mkdir -p artifacts/test-results/a11y-temp + find artifacts/test-results/a11y -type f -name '*.sarif' -exec cp {} artifacts/test-results/a11y-temp/ \; + if: always() + - name: Upload a11y analysis results uses: github/codeql-action/upload-sarif@v4 if: always() with: - sarif_file: artifacts/test-results/a11y.sarif + sarif_file: artifacts/test-results/a11y-temp category: a11y wait-for-processing: false