Files
languageservices/actions-workflow-parser/testdata/reader/reusable-workflow-job-permissions-embedded-permissions.yml
T
2023-01-06 15:54:31 -08:00

124 lines
2.6 KiB
YAML

include-source: false # Drop file/line/col from output
skip:
- Go
- TypeScript
permissions-policy: LimitedRead
---
on: push
permissions: write-all
jobs:
build:
uses: contoso/templates/.github/workflows/build.yml@v1
---
contoso/templates/.github/workflows/build.yml@v1
---
on: workflow_call
permissions:
actions: read
jobs:
# Inherits workflow level
deploy:
runs-on: ubuntu-latest
steps:
- run: echo 1
# Overrides workflow level
deploy2:
permissions:
actions: write
runs-on: ubuntu-latest
steps:
- run: echo 1
---
{
"permissions": {
"actions": "write",
"checks": "write",
"contents": "write",
"deployments": "write",
"discussions": "write",
"id-token": "write",
"issues": "write",
"packages": "write",
"pages": "write",
"pull-requests": "write",
"repository-projects": "write",
"security-events": "write",
"statuses": "write"
},
"jobs": [
{
"Type": "reusableWorkflowJob",
"Id": "build",
"Name": "build",
"Needs": [],
"If": {
"type": 3,
"expr": "success()"
},
"Ref": "contoso/templates/.github/workflows/build.yml@v1",
"Permissions": {
"actions": "read"
},
"InputDefinitions": null,
"InputValues": null,
"SecretDefinitions": null,
"SecretValues": null,
"InheritSecrets": false,
"Outputs": null,
"Defaults": null,
"Env": null,
"Concurrency": null,
"EmbeddedConcurrency": null,
"Strategy": null,
"Jobs": [
{
"type": "job",
"id": "deploy",
"name": "deploy",
"if": {
"type": 3,
"expr": "success()"
},
"permissions": {
"actions": "read"
},
"runs-on": "ubuntu-latest",
"steps": [
{
"id": "__run",
"if": {
"type": 3,
"expr": "success()"
},
"run": "echo 1"
}
]
},
{
"type": "job",
"id": "deploy2",
"name": "deploy2",
"if": {
"type": 3,
"expr": "success()"
},
"permissions": {
"actions": "write"
},
"runs-on": "ubuntu-latest",
"steps": [
{
"id": "__run",
"if": {
"type": 3,
"expr": "success()"
},
"run": "echo 1"
}
]
}
]
}
]
}