Skip to content

Adding updated scripts #2752

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 5 commits into
base: canary
Choose a base branch
from
Open

Adding updated scripts #2752

wants to merge 5 commits into from

Conversation

@hellovai
Copy link
Contributor

@hellovai hellovai commented Nov 27, 2025

No description provided.

@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 17:16 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 17:16 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 17:16 — with GitHub Actions Inactive
@vercel
Copy link

vercel bot commented Nov 27, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
promptfiddle Ready Ready Preview Comment Nov 27, 2025 10:14pm

@github-actions
Copy link

github-actions bot commented Nov 27, 2025

🌿 Preview your docs: https://boundary-preview-5fdeecc6-5ca0-4244-80aa-0eccd2d4c146.docs.buildwithfern.com

@github-actions
Copy link

github-actions bot commented Nov 27, 2025

https://sage-backend-r82nf4kbq-baml.vercel.app

@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 17:54 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 17:54 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 17:54 — with GitHub Actions Inactive
@github-actions
Copy link

github-actions bot commented Nov 27, 2025

🌿 Preview your docs: https://boundary-preview-3fb59d0f-cdda-43e5-9cee-91513a2524cf.docs.buildwithfern.com

@github-actions
Copy link

github-actions bot commented Nov 27, 2025

https://sage-backend-lslqkdfm8-baml.vercel.app

@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 18:38 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 18:38 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 18:38 — with GitHub Actions Inactive
github-advanced-security[bot]
github-advanced-security bot found potential problems Nov 27, 2025
View reviewed changes
.github/workflows/ci-onboarding.yaml
Comment on lines 11 to 45
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Setup Rust (1.89)
uses: ./.github/actions/setup-rust
with:
toolchain: '1.89'
enable-wasm: 'false'

- name: Install mise and repo tools (jdx/mise-action@v3)
uses: jdx/mise-action@v3
with:
install: true
cache: true
reshim: true
github_token: ${{ secrets.GITHUB_TOKEN }}
# Let the action read the repo's mise.toml /.tool-versions by default
working_directory: .


- name: Make setup script executable
run: chmod +x ./scripts/setup-dev.sh || true

- name: Run project setup
env:
CI: true
run: |
set -euxo pipefail
bash ./scripts/setup-dev.sh

- name: Build project
run: |
pnpm build

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 7 days ago

To fix the issue, you should add an explicit permissions: block to this workflow to limit the permissions granted to the GITHUB_TOKEN. The correct place to do this is at the root level of the workflow file, directly beneath the name: field (or before/after on:), so that it applies to all jobs unless overwritten at the job level. Since none of the current steps require write permissions, you can set contents: read as the minimal starting point. This change only requires adding a new block and does not alter existing functionality.

Suggested changeset 1
.github/workflows/ci-onboarding.yaml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/ci-onboarding.yaml b/.github/workflows/ci-onboarding.yaml
--- a/.github/workflows/ci-onboarding.yaml
+++ b/.github/workflows/ci-onboarding.yaml
@@ -1,4 +1,6 @@
 name: Onboarding Setup
+permissions:
+  contents: read
 
 on:
   push:
EOF
@@ -1,4 +1,6 @@
name: Onboarding Setup
permissions:
contents: read

on:
push:
Copilot is powered by AI and may make mistakes. Always verify output.
.github/workflows/ci-onboarding.yaml
enable-wasm: 'false'

- name: Install mise and repo tools (jdx/mise-action@v3)
uses: jdx/mise-action@v3

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Onboarding Setup' step
Uses Step
Loading
uses 'jdx/mise-action' with ref 'v3', not a pinned commit hash
@github-actions
Copy link

github-actions bot commented Nov 27, 2025

🌿 Preview your docs: https://boundary-preview-dc91784f-9f2c-4663-adf2-4fdb9ce1b070.docs.buildwithfern.com

@github-actions
Copy link

github-actions bot commented Nov 27, 2025

https://sage-backend-jayqzxawm-baml.vercel.app

@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 18:47 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 18:47 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 18:47 — with GitHub Actions Inactive
@github-actions
Copy link

github-actions bot commented Nov 27, 2025

🌿 Preview your docs: https://boundary-preview-70a5c92b-893a-4ffc-8895-dd1113adc4ad.docs.buildwithfern.com

@github-actions
Copy link

github-actions bot commented Nov 27, 2025

https://sage-backend-j4s39rdll-baml.vercel.app

@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 21:58 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 21:58 — with GitHub Actions Inactive
@hellovai hellovai temporarily deployed to boundary-tools-dev November 27, 2025 21:58 — with GitHub Actions Inactive
@github-actions
Copy link

github-actions bot commented Nov 27, 2025

🌿 Preview your docs: https://boundary-preview-b29a28cf-e482-41d7-bc95-8f5a2d0f816f.docs.buildwithfern.com

@github-actions
Copy link

github-actions bot commented Nov 27, 2025

https://sage-backend-lptgp03gh-baml.vercel.app

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hellovai