Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OpenSSF best practices: set GITHUB_TOKEN permission to read-all #677

Merged
merged 1 commit into from
Nov 10, 2023
Merged

OpenSSF best practices: set GITHUB_TOKEN permission to read-all #677

merged 1 commit into from
Nov 10, 2023

Conversation

gkunz
Copy link
Contributor

@gkunz gkunz commented Nov 9, 2023

This change sets the GITHUB_TOKEN permission explicitly to read-only for GitHub actions.

Fixes #669

@gkunz
OpenSSF best practices: set GITHUB_TOKEN permission to read-all
6ea04ba 
This change sets the GITHUB_TOKEN permission explicitly to read-only for
GitHub actions.

Signed-off-by: Georg Kunz <georg.kunz@ericsson.com>
@gkunz gkunz requested a review from mcserep November 9, 2023 18:15
mcserep
mcserep approved these changes Nov 10, 2023
View reviewed changes
Copy link
Collaborator

@mcserep mcserep left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution @gkunz!

@mcserep mcserep merged commit 3518b84 into Ericsson:master Nov 10, 2023
7 checks passed
@mcserep mcserep added the Target: Developer environment Developer environment issues consist of CodeCompass or 3rd-party build tooling, configuration or CI. label Nov 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mcserep mcserep mcserep approved these changes

Assignees
No one assigned
Labels
Target: Developer environment Developer environment issues consist of CodeCompass or 3rd-party build tooling, configuration or CI.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Configure GitHub token permissions
2 participants
@gkunz @mcserep