From 3cff56160c80d6ee24e050613dd97f2abd8b275f Mon Sep 17 00:00:00 2001 From: Genevieve Warren <24882762+gewarren@users.noreply.github.com> Date: Wed, 22 Jul 2026 10:50:32 -0700 Subject: [PATCH 1/3] add separate workflow for preview link generation --- .../workflows/check-for-build-warnings.yml | 4 +-- .github/workflows/generate-preview-links.yml | 27 +++++++++++++++++++ 2 files changed, 28 insertions(+), 3 deletions(-) create mode 100644 .github/workflows/generate-preview-links.yml diff --git a/.github/workflows/check-for-build-warnings.yml b/.github/workflows/check-for-build-warnings.yml index 839162daa8eef..87297757e0f7f 100644 --- a/.github/workflows/check-for-build-warnings.yml +++ b/.github/workflows/check-for-build-warnings.yml @@ -1,6 +1,6 @@ name: 'OPS status checker' -on: +on: pull_request_target: types: [opened, synchronize, reopened] @@ -23,5 +23,3 @@ jobs: - uses: dotnet/docs-tools/actions/status-checker@main with: repo_token: ${{ secrets.GITHUB_TOKEN }} - docs_path: "docs" - url_base_path: "dotnet" diff --git a/.github/workflows/generate-preview-links.yml b/.github/workflows/generate-preview-links.yml new file mode 100644 index 0000000000000..7479d3ed85308 --- /dev/null +++ b/.github/workflows/generate-preview-links.yml @@ -0,0 +1,27 @@ +name: 'Preview link generator' + +on: + pull_request_target: + types: [opened, synchronize, reopened] + +permissions: + contents: read + +jobs: + status_checker_job: + name: Generate preview link table + runs-on: ubuntu-latest + permissions: + statuses: read + pull-requests: write + steps: + - name: Harden Runner + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 + with: + egress-policy: audit + + - uses: dotnet/docs-tools/actions/preview-link-generator@main + with: + repo_token: ${{ secrets.GITHUB_TOKEN }} + docs_path: "docs" + url_base_path: "dotnet" From 60fe03376758a713fed500e89895ed90cc0289e8 Mon Sep 17 00:00:00 2001 From: Genevieve Warren <24882762+gewarren@users.noreply.github.com> Date: Wed, 22 Jul 2026 11:07:20 -0700 Subject: [PATCH 2/3] Refactor permissions in generate-preview-links.yml --- .github/workflows/generate-preview-links.yml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/generate-preview-links.yml b/.github/workflows/generate-preview-links.yml index 7479d3ed85308..be906aba787d4 100644 --- a/.github/workflows/generate-preview-links.yml +++ b/.github/workflows/generate-preview-links.yml @@ -4,16 +4,13 @@ on: pull_request_target: types: [opened, synchronize, reopened] -permissions: - contents: read - jobs: status_checker_job: name: Generate preview link table runs-on: ubuntu-latest permissions: - statuses: read - pull-requests: write + statuses: read + pull-requests: write steps: - name: Harden Runner uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 From 82a7ddc463de6a27cfca1d223cc2d464b3f3a4b0 Mon Sep 17 00:00:00 2001 From: Genevieve Warren <24882762+gewarren@users.noreply.github.com> Date: Wed, 22 Jul 2026 11:08:10 -0700 Subject: [PATCH 3/3] Rename job from status_checker_job to preview_link_generator_job --- .github/workflows/generate-preview-links.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/generate-preview-links.yml b/.github/workflows/generate-preview-links.yml index be906aba787d4..3a0c780db4acb 100644 --- a/.github/workflows/generate-preview-links.yml +++ b/.github/workflows/generate-preview-links.yml @@ -5,7 +5,7 @@ on: types: [opened, synchronize, reopened] jobs: - status_checker_job: + preview_link_generator_job: name: Generate preview link table runs-on: ubuntu-latest permissions: