-
Notifications
You must be signed in to change notification settings - Fork 130
Add additional GHA settings #894
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
This adds some miscellaneous settings: - Set workflow default permissions as read-only (per security best practices) - Support merge queues - Support manual invocation (for debugging) - Make it so that starting another run of this workflow will cancel any ongoing runs for the same PR or branch (e.g., because a new push happened while the workflow is still running from a previous push)
If you can get merge queues working smoothly, I'd absolutely use them. Last time I tried I failed. |
cancel-in-progress: true | ||
group: ${{github.workflow}}-${{github.event.pull_request.number||github.ref}} | ||
|
||
# Declare default permissions as read-only. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
permissions for what?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Permissions granted to workflow actions w.r.t. GITHUB_TOKEN.
merge_group: | ||
types: | ||
- checks_requested | ||
# Allow manual invocation – useful for debugging. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
manual invocation how?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The comment refers to the next line, which is workflow_dispatch
.
This adds some miscellaneous settings:
practices)
any ongoing runs for the same PR or branch (e.g., because a new push
happened while the workflow is still running from a previous push)