naveen
|
c6a7aa08c7
|
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
|
2022-04-27 01:37:20 +00:00 |
|
Tim Schaub
|
6665b3325b
|
Update the security scan task
|
2021-11-19 11:57:19 -07:00 |
|
Tim Schaub
|
f2023cda96
|
Revert "Remove the security scan workflow"
|
2021-11-19 11:54:54 -07:00 |
|
Tim Schaub
|
26d5b2163a
|
Remove CodeQL workflow
|
2021-11-19 08:36:36 -07:00 |
|
Tim Schaub
|
6f2afe0088
|
Update the security scan task
|
2021-11-18 15:56:24 -07:00 |
|
Tim Schaub
|
19d8100049
|
Following the recommendation to run on a merge commit
|
2021-04-28 19:49:29 -07:00 |
|
Tim Schaub
|
714e08761f
|
Add security scan
|
2020-08-25 23:20:55 -06:00 |
|