Skip to content

Main 코드 업데이트#24

Merged
Sangyoon98 merged 59 commits intomainfrom
dev
Nov 7, 2025
Merged

Main 코드 업데이트#24
Sangyoon98 merged 59 commits intomainfrom
dev

Conversation

@Sangyoon98
Copy link
Member

No description provided.

CHOOSLA and others added 30 commits October 14, 2025 10:48
[FEAT] 로그인 구현
[FEAT] 부품 조회 화면 구현
SPM-175 주문관리 구현 / 주문 로직 구현
Comment on lines +10 to +15
uses: 33-Auto/.github/.github/workflows/reusable-pr-reminder.yml@main
secrets:
# 해당 시크릿은 조직의 시크릿에 저장되어 있음
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
with:
SLACK_USER_MAP: ${{ vars.SLACK_USER_MAP }} No newline at end of file

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 3 months ago

To fix this issue, add an explicit permissions block at the root of the workflow file (above on:), as all jobs in the workflow that do not have their own permissions key will inherit these settings. The best approach is to start with minimal permissions and increment as necessary. Since the job is used to send Slack notifications related to PRs and uses secrets, it's best to set contents: read and pull-requests: read as a minimal safe configuration, unless further write permissions are required for PRs (e.g., editing, commenting). Update lines at the top of .github/workflows/pr-reminder.yml to add:

permissions:
  contents: read
  pull-requests: read

If in the future you require more permissions (such as issues: write or pull-requests: write), you can further increase granularity.

Suggested changeset 1
.github/workflows/pr-reminder.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/pr-reminder.yml b/.github/workflows/pr-reminder.yml
--- a/.github/workflows/pr-reminder.yml
+++ b/.github/workflows/pr-reminder.yml
@@ -1,4 +1,7 @@
   name: PR Reminder
+  permissions:
+    contents: read
+    pull-requests: read
 
   on:
     schedule:
EOF
@@ -1,4 +1,7 @@
name: PR Reminder
permissions:
contents: read
pull-requests: read

on:
schedule:
Copilot is powered by AI and may make mistakes. Always verify output.
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 7, 2025

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dev

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

@Lee-Jong-Jin Lee-Jong-Jin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

승인

Copy link

@taemin3 taemin3 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

확인했습니다

@Sangyoon98 Sangyoon98 merged commit 32252e8 into main Nov 7, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants