Files
Nguyễn Đình QuýandCopilot Autofix powered by AI ee5303867d Potential fix for code scanning alert no. 1: Workflow does not contain permissions (dependabot permissions)
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-11-03 08:20:40 +07:00

33 lines
881 B
YAML

name: Sync requirements.txt
on:
pull_request:
paths:
- 'pyproject.toml'
permissions:
contents: write
jobs:
sync:
# Optional: restricts auto-commit behavior to Dependabot PRs for safety
if: github.actor == 'dependabot[bot]'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
ref: ${{ github.head_ref }}
# Requires a custom PAT or GitHub App token if you want this push
# to trigger other downstream CI workflows.
- name: Install uv
uses: astral-sh/setup-uv@v3
- name: Compile requirements.txt
run: uv pip compile pyproject.toml -o requirements.txt
- name: Commit and push changes
uses: stefanzweifel/git-auto-commit-action@v5
with:
commit_message: "chore: recompile requirements.txt"
file_pattern: "requirements.txt"