Skip to content

lab02.md

Latest commit

 

History

History
45 lines (42 loc) · 2.27 KB

lab02.md

File metadata and controls

45 lines (42 loc) · 2.27 KB

2 - Managing GitHub Actions settings for a repository

In this lab you will restrict the usage of Actions in your own repository

Duration: 5-10 minutes

References:

2.1 Update Actions and Workflow permissions

  1. Navigate to the Settings > Actions > General page of your own repository
  2. In the section Actions permissions click on the last option to only allow specified actions and reusable workflows
  3. Check the setting Allow actions created by GitHub
  4. Click Save
  5. In the section Workflow permissions select the option Read repository contents permission to change the default permissions granted to the GITHUB_TOKEN when running workflows.
  6. Cick Save
  7. Go to Actions tab of your repository
  8. Create your first Simple workflow by clicking Configure on the suggested workflow
  9. Name you file ci.yml and commit the changes to your main branch
  10. The workflow will be triggered automatically, wait to finish the execution
  11. Open the workflow file ci.yml
  12. Edit the file and copy the following YAML content at the end of the file:
  hello_world_job:
    runs-on: ubuntu-latest
    name: A first job to say hello
    steps:
      - id: hello-world
        uses: githubdevopsabcs/hello-world-composite-action@v1.0.1
        with:
          who-to-greet: 'Hello from GH ABCs'
      - run: echo random-number ${{ steps.hello-world.outputs.random-number }}
        shell: bash
  1. Commit the changes into the main branch
  2. Go to Actions and see the details of your running workflow
  3. The workflow has the error:
[githubdevopsabcs/hello-world-composite-action@main] is not allowed to be used in [organization]. 
Actions in this workflow must be: within a repository that belongs to your Enterprise account or created by GitHub.
  1. Navigate to the Settings > Actions > General page of your own repository
  2. Allow the action by adding it to the Allow specified actions and reusable workflows field:
githubdevopsabcs/hello-world-composite-action@v1.0.1