Skip to content

workflows now explicitly declare permissions: contents: read - #125

Merged
eguzki merged 1 commit into
mainfrom
tighten-workflow-permissions
Aug 24, 2026
Merged

workflows now explicitly declare permissions: contents: read#125
eguzki merged 1 commit into
mainfrom
tighten-workflow-permissions

Conversation

@eguzki

@eguzki eguzki commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

Signed-off-by: Eguzki Astiz Lezaun <eastizle@redhat.com>
@eguzki
eguzki requested a review from Boomatang July 29, 2026 16:09
@coderabbitai

coderabbitai Bot commented Jul 29, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@eguzki, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 49 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3074c9a7-e747-414c-93fa-46caa6d6ac6e

📥 Commits

Reviewing files that changed from the base of the PR and between f74f59b and 9b27ad6.

📒 Files selected for processing (3)
  • .github/workflows/code-style.yaml
  • .github/workflows/commands.yaml
  • .github/workflows/testing.yaml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 45.21%. Comparing base (3988d85) to head (9b27ad6).
⚠️ Report is 9 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #125      +/-   ##
==========================================
- Coverage   48.39%   45.21%   -3.19%     
==========================================
  Files          17       18       +1     
  Lines         998      794     -204     
==========================================
- Hits          483      359     -124     
+ Misses        443      363      -80     
  Partials       72       72              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@eguzki
eguzki enabled auto-merge July 29, 2026 16:13
@eguzki
eguzki added this pull request to the merge queue Aug 24, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Aug 24, 2026
@eguzki
eguzki added this pull request to the merge queue Aug 24, 2026
Merged via the queue into main with commit b97c2ea Aug 24, 2026
10 checks passed
@eguzki
eguzki deleted the tighten-workflow-permissions branch August 24, 2026 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants