diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index 839c8a6..177c25f 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -10,6 +10,8 @@ jobs: rubocop: runs-on: ubuntu-latest + permissions: + id-token: write steps: - uses: actions/checkout@v3 @@ -17,6 +19,9 @@ jobs: uses: ruby/setup-ruby@v1 with: ruby-version: '3.4' + - uses: flatt-security/setup-takumi-guard-rubygems@v1 + with: + bot-id: "${{ vars.TAKUMI_GUARD_BOT_ID }}" - name: Install dependencies run: bundle install - name: Run RuboCop diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 7440121..1e659e8 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -10,6 +10,8 @@ jobs: test: runs-on: ubuntu-latest + permissions: + id-token: write strategy: matrix: @@ -22,6 +24,9 @@ jobs: uses: ruby/setup-ruby@v1 with: ruby-version: ${{ matrix.ruby-version }} + - uses: flatt-security/setup-takumi-guard-rubygems@v1 + with: + bot-id: "${{ vars.TAKUMI_GUARD_BOT_ID }}" - name: Set up Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: