Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Declare permissions #15493

Merged
merged 2 commits into from
Feb 15, 2024
Merged

Declare permissions #15493

merged 2 commits into from
Feb 15, 2024

Commits on Feb 14, 2024

  1. use github/codeql-action...@main

    @jsoref
    jsoref committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    e468f40 View commit details
    Browse the repository at this point in the history

  2. Declare permissions 

    Repositories can be configured with Default access (restricted)
https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

Best practice says that workflows should declare the minimal permissions they require.
Without declaring permissions, paranoid forks fail miserably.
    @jsoref
    jsoref committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    b58c856 View commit details
    Browse the repository at this point in the history