Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Tighten GITHUB_TOKEN permissions #459

Open
DerekRoberts opened this issue Aug 20, 2022 · 0 comments
Open

Tighten GITHUB_TOKEN permissions #459

DerekRoberts opened this issue Aug 20, 2022 · 0 comments
Labels
enhancement New feature or request

Comments

@DerekRoberts
Copy link
Member

Follows GitHub's best practices. Limit GITHUB_TOKEN's permissions (e.g. read only) to prevent misuse, like if an Action is compromised.

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions
@DerekRoberts DerekRoberts added enhancement New feature or request med labels Aug 20, 2022
@DerekRoberts DerekRoberts transferred this issue from bcgov/nr-fom Aug 20, 2022
@DerekRoberts DerekRoberts moved this to 🆕 New in DevOps (NR) Sep 8, 2022
@DerekRoberts DerekRoberts moved this from 🆕 New to 🔖 Ready in DevOps (NR) Sep 9, 2022
@DerekRoberts DerekRoberts removed the med label Sep 9, 2022
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
DevOps (NR)
Status: Backlog
Milestone
No milestone
Development

No branches or pull requests
1 participant
@DerekRoberts