mirror of
https://github.com/greenart7c3/Amber.git
synced 2026-09-14 00:35:08 +00:00
Claude
dacb9cc9aa
Add explicit permissions blocks to all workflows to limit the scope of the GITHUB_TOKEN rather than relying on the broad default permissions. - build.yml: contents: read (checkout + artifacts) - check-offline-permissions.yml: contents: read - unsigned-release.yml: contents: read - create-release.yml: contents: write (create release + upload assets) - crowdin.yml: contents: write + pull-requests: write (push translations, open PRs) https://claude.ai/code/session_012jEe5WfLkonuFPNZ7q7fKc
34 lines
965 B
YAML
34 lines
965 B
YAML
name: Crowdin Action
|
|
|
|
on:
|
|
push:
|
|
branches: [ master ]
|
|
|
|
permissions:
|
|
contents: write
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
synchronize-with-crowdin:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: crowdin action
|
|
uses: crowdin/github-action@v2
|
|
with:
|
|
upload_sources: true
|
|
upload_translations: true
|
|
download_translations: true
|
|
localization_branch_name: l10n_crowdin_translations
|
|
create_pull_request: true
|
|
pull_request_title: 'New Crowdin Translations'
|
|
pull_request_body: 'New Crowdin translations by [Crowdin GH Action](https://github.com/crowdin/github-action)'
|
|
pull_request_base_branch_name: 'master'
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
|
|
CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
|