Skip to content

Declare least necessary permissions for GitHub Action; pin ruby/setup-ruby to sha - #197

Merged
bensheldon merged 2 commits into
mainfrom
gh-action-permissions
Oct 10, 2024
Merged

Declare least necessary permissions for GitHub Action; pin ruby/setup-ruby to sha#197
bensheldon merged 2 commits into
mainfrom
gh-action-permissions

Conversation

@bensheldon

@bensheldonbensheldon commented Oct 10, 2024

Copy link
Copy Markdown
Contributor

Addressing some security findings:

  • Unpinned tag for 3rd party Action in workflow
  • Workflow does not contain permissions

@bensheldon
bensheldon requested a review from a team as a code ownerOctober 10, 2024 19:54
@bensheldonbensheldon changed the title Declare least necessary permissions for GitHub ActionDeclare least necessary permissions for GitHub Action; pin ruby/setup-ruby to shaOct 10, 2024
@bensheldon
bensheldon merged commit 6fdf93d into mainOct 10, 2024
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@bensheldon@mattr-