Merge pull request #133 from rsksmart/fix_action_permissions

Fix Scorecard findings

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
 
 permissions:
   contents: read
-  packages: write
+
 env:
   TEST_TAG:  ${{ github.event.repository.name }}/rit:test
   LATEST_TAG: ghcr.io/rsksmart/${{ github.event.repository.name }}/rit
@@ -105,22 +105,21 @@ jobs:
           echo "RIT Message = ${{ steps.test-rit-action.outputs.message }}"
 
   publish-rit-action-tag:
-      needs:  test-rit-action
-      name: Publish RIT Action tag
-      runs-on: ubuntu-latest
-      timeout-minutes: 60
-      if: github.ref == 'refs/heads/main'
-      permissions:
-        contents:  write
-        packages: write
-
-      steps:
-        - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-          with:
-            token: ${{ secrets.GITHUB_TOKEN }}
-        - name: Publish new version
-          run: |
-            git config --global user.email "[email protected]"
-            git config --global user.name "RIT Release Automation"
-            git tag -fa v1 -m "Updating rootstock-integration-tests container action v1"
-            git push origin v1 --force
+    needs:  test-rit-action
+    name: Publish RIT Action tag
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    if: github.ref == 'refs/heads/main'
+    permissions:
+      contents:  write
+
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Publish new version
+        run: |
+          git config --global user.email "[email protected]"
+          git config --global user.name "RIT Release Automation"
+          git tag -fa v1 -m "Updating rootstock-integration-tests container action v1"
+          git push origin v1 --force

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 RootstockLabs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.