mirror of
https://github.com/github/awesome-copilot.git
synced 2026-06-19 14:07:41 +00:00
Tighten external plugin PR workflow permissions
Scope write permissions to the PR synchronization job, keep the quality-gate job read-only, and handle no-op and detection-failure states explicitly. Also fix source tree link encoding for refs, SHAs, and plugin paths. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
@@ -28,7 +28,7 @@ export function buildSourceTreeUrl(plugin) {
|
||||
return `https://github.com/${sourceRepo}`;
|
||||
}
|
||||
|
||||
const encodedLocator = encodePathLikeValue(sourceLocator);
|
||||
const encodedLocator = encodeURIComponent(sourceLocator);
|
||||
const normalizedPath = normalizePluginPath(plugin?.source?.path);
|
||||
if (!normalizedPath) {
|
||||
return `https://github.com/${sourceRepo}/tree/${encodedLocator}`;
|
||||
|
||||
Reference in New Issue
Block a user