Security/improve workflows security #190

tagliala · 2023-01-05T09:07:55Z

No description provided.

Workflows run with extended set of permissions by default. By specifying any permission explicitly, all others are set to none. Ref: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

tagliala · 2023-01-06T15:52:05Z

This is fine, the breaking change with rails edge is tracked into #191

tagliala force-pushed the security/improve-workflows-security branch from b821ec9 to 3d91ad5 Compare January 5, 2023 09:09

Test against Ruby 3.2

76db541

tagliala force-pushed the security/improve-workflows-security branch 3 times, most recently from 8fdde44 to e37bd7e Compare January 5, 2023 09:32

Conditionally set RubyGems version

0c6c117

tagliala force-pushed the security/improve-workflows-security branch from e37bd7e to 0c6c117 Compare January 5, 2023 14:34

Move legacy ruby to a different workflow

bfd9132

tagliala force-pushed the security/improve-workflows-security branch from 9298296 to bfd9132 Compare January 5, 2023 15:16

tagliala merged commit e9444bd into master Jan 6, 2023

tagliala deleted the security/improve-workflows-security branch January 6, 2023 15:52

Provide feedback