RELEASE 1.0! #5

2026-09-09T08:25:39Z

IgorVolochay commented

2026-09-09 08:25:39 +00:00

(Migrated from github.com)

No description provided.

github-advanced-security[bot] (Migrated from github.com) reviewed 2026-09-09 08:26:33 +00:00

						
				@@ -0,0 +44,4 @@

				      - name: Run mypy

				        run: mypy --ignore-missing-imports ./app

				  pytest:

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/3)

.github/workflows/backend-ci.yml

						
				@@ -0,0 +105,4 @@

				        run: python3 _add_base_cards.py -a 2 -f data/base_cards.json

				      - name: Run pytest

				        run: pytest -vs

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/6)

.github/workflows/frontend-ci.yml

						
				@@ -0,0 +45,4 @@

				      - name: Build React app

				        working-directory: ./frontend

				        run: npm run build

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/4)

.github/workflows/prebuild-ci.yml

						
				@@ -0,0 +39,4 @@

				        working-directory: ./frontend

				        run: npm run build

				  backend-mypy:

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/2)

.github/workflows/prebuild-ci.yml

						
				@@ -0,0 +62,4 @@

				      - name: Run mypy

				        run: mypy --ignore-missing-imports ./app

				  backend-pytest:

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/5)

.github/workflows/prebuild-ci.yml

						
				@@ -0,0 +125,4 @@

				      - name: Run pytest

				        run: pytest -vs

				  docker-test-build:

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/7)

.github/workflows/prebuild-ci.yml

						
				@@ -0,0 +134,4 @@

				        uses: actions/checkout@v4

				      - name: Build Docker images (dry-run test via docker compose)

				        run: docker compose build

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/10)

.github/workflows/prebuild.yml

						
				@@ -0,0 +18,4 @@

				      - name: Try to build project

				        run: docker-compose up --build

				  deploy_to_test_server:

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:32 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/8)

.github/workflows/prebuild.yml

						
				@@ -0,0 +41,4 @@

				            git pull

				            docker-compose down || true

				            docker-compose up -d --build

github-advanced-security[bot] (Migrated from github.com) commented

2026-09-09 08:26:33 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}} [Show more details](https://github.com/IgorVolochay/thisORthat/security/code-scanning/9)

IgorVolochay (Migrated from github.com) reviewed 2026-09-09 08:38:46 +00:00

app/tools/data/dirty_words.py

IgorVolochay (Migrated from github.com) commented

2026-09-09 08:38:46 +00:00

I love this file :D

IgorVolochay (Migrated from github.com) reviewed 2026-09-09 08:44:16 +00:00

IgorVolochay (Migrated from github.com) left a comment

Ok 👌

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volochay/thisORthat#5