 Lorenzo Zabot
|
4f1c6a74a7
|
Update actions/checkout to v4
|
2023-09-06 11:47:06 +02:00 |
|
|
Benoit Daloze
|
8b5af312bd
|
Fix permissions of release job
|
2022-07-29 18:24:39 +02:00 |
|
|
neilnaveen
|
3325fe2d4e
|
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
|
2022-07-27 19:15:28 +02:00 |
|
|
Benoit Daloze
|
2489e28c66
|
Use actions/checkout@v3 in workflows
|
2022-05-31 11:17:28 +02:00 |
|
|
Benoit Daloze
|
d4032b551d
|
The release workflow needs a full checkout
|
2020-04-18 14:01:20 +02:00 |
|
|
Benoit Daloze
|
da846ef6db
|
Add a workflow to automatically bump the v1 branch when publishing a release
|
2020-04-18 13:51:50 +02:00 |
|