Skip to content

Conversation

@stephwon
Copy link
Contributor

@stephwon stephwon commented Dec 12, 2025

Edited the title and Summary section, first paragraph, adding description of statistical framework per reviewer's request

Park and others added 13 commits November 12, 2024 14:44
Added missing comma was added that was causing the bib file test fail.
…ki D, Brown CT. 2022. Lightweight compositional analysis of metagenomes with FracMinHash and minimum metagenome covers. bioRxiv 10.1101/2022.01.11.475838 [DOI] per JOSS reviewer request
…ata of a defined microbial mock community." Scientific data 3.1 (2016): 1-8.
Change title by adding "Software for" (refer to JOSS reviewer #137)
added description of what statistical framework is being referred to
Comment on lines +10 to +28
runs-on: ubuntu-latest
name: Paper Draft
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Build draft PDF
uses: openjournals/openjournals-draft-action@master
with:
journal: joss
# This should be the path to the paper within your repo.
paper-path: joss/paper.md
- name: Upload
uses: actions/upload-artifact@v4
with:
name: paper
# This is the output path where Pandoc will write the compiled
# PDF. Note, this should be the same directory as the input
# paper.md
path: joss/paper.pdf No newline at end of file

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI about 1 month ago

How to, in general terms, fix the problem:
Add a permissions block to the workflow or job to explicitly restrict the GITHUB_TOKEN permissions just to what is needed. If no write access is necessary, set to contents: read.

Best way to fix the problem without changing existing functionality:
Insert a permissions: block with contents: read immediately after the workflow name: and before the on: key (i.e., applying it at the workflow level). This ensures that all jobs in the workflow receive only read permission on contents, following the principle of least privilege. No further modifications to jobs or steps are required.

What needs changing:

  • Edit .github/workflows/draft-pdf.yml
  • Add a permissions: block at the root level with contents: read

Suggested changeset 1
.github/workflows/draft-pdf.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/draft-pdf.yml b/.github/workflows/draft-pdf.yml
--- a/.github/workflows/draft-pdf.yml
+++ b/.github/workflows/draft-pdf.yml
@@ -1,4 +1,6 @@
 name: Draft PDF
+permissions:
+  contents: read
 on:
   push:
     paths:
EOF
@@ -1,4 +1,6 @@
name: Draft PDF
permissions:
contents: read
on:
push:
paths:
Copilot is powered by AI and may make mistakes. Always verify output.
- name: Checkout
uses: actions/checkout@v4
- name: Build draft PDF
uses: openjournals/openjournals-draft-action@master

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Draft PDF' step
Uses Step
uses 'openjournals/openjournals-draft-action' with ref 'master', not a pinned commit hash
readme - Added target audiences and the problem statement at the front, briefly wrote the dependencies.
JOSS/paper.md - figure formatting, references from and within figures and tables, input clarifications.
@stephwon stephwon requested a review from chunyuma December 22, 2025 19:56
@stephwon stephwon closed this Dec 22, 2025
@stephwon stephwon reopened this Dec 22, 2025
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

@stephwon stephwon closed this Dec 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants