Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Github Actions: set top-level permissions #2860

Closed
psilva-veeam opened this issue May 6, 2024 · 1 comment · Fixed by #2861
Closed

[BUG] Github Actions: set top-level permissions #2860

psilva-veeam opened this issue May 6, 2024 · 1 comment · Fixed by #2861

Comments

@psilva-veeam
Copy link
Contributor

Describe the bug

Set top-level permissions for Github Actions to contents: read. If needed, individual jobs can still get higher permissions.

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

To Reproduce

Dependabot status

Expected behavior

Top-level permissions for Github Actions set to contents: read resulting in no issues from Dependabot

Screenshots

Environment

Github Actions

Additional context

kastenhq/kubestr#242

Copy link

github-actions bot commented May 6, 2024

Thanks for opening this issue 👍. The team will review it shortly.

If this is a bug report, make sure to include clear instructions how on to reproduce the problem with minimal reproducible examples, where possible. If this is a security report, please review our security policy as outlined in SECURITY.md.

If you haven't already, please take a moment to review our project's Code of Conduct document.

@infraq infraq added this to To Be Triaged in Kanister May 6, 2024
Kanister automation moved this from To Be Triaged to Done May 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging a pull request may close this issue.

1 participant