Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Akto Integration #1815

Closed
wants to merge 1 commit into from
Closed

Conversation

swati31196
Copy link
Contributor

No description provided.

Copy link

changeset-bot bot commented Nov 10, 2023

⚠️ No Changeset found

Latest commit: 54e26fd

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

uses: razorpay/security-action/akto@master
with:
check_name: 'Api Build'
git_token: ${{ secrets.GIT_TOKEN }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Service account GIT_TOKENs have long served as a dependable means of accessing our GitHub repositories. However, their long-term nature, without any expiration, has raised concerns about potential security risks. In contrast, GitHub App Tokens offer an enhanced, more secure, and flexible approach to managing access, benefiting both our team and our users. GitHub app tokens not only grant fine-grained control over permissions but also provide an added layer of security by being intentionally short-lived, minimizing the exposure window for potential security threats. Docs - https://docs.google.com/document/d/1oS0_8LPfdy07PSsCiyHOx2ZPlwwNZ_sJs8y53sbJzRg/edit#heading=h.2pkjwb2hp2ck Slack Thread - https://razorpay.slack.com/archives/C3UAR8DQE/p1698234208754839

⚪️ This finding does not block your pull request.


Ignore this finding from git-token-usage.

Copy link

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit 54e26fd:

Sandbox Source
razorpay/blade: basic Configuration

Copy link

bundlemon bot commented Nov 10, 2023

BundleMon

Unchanged files (14)
Status Path Size Limits
Web Components
build/components/index.production.web.js
265.2KB -
React Native Components
build/components/index.native.js
186.63KB -
Web Tokens
build/tokens/index.production.web.js
42.24KB -
React Native Tokens
build/tokens/index.native.js
38.35KB -
CSS Theme Tokens
build/css/paymentThemeDarkDesktop.css
4.55KB -
CSS Theme Tokens
build/css/paymentThemeDarkMobile.css
4.54KB -
CSS Theme Tokens
build/css/bankingThemeLightDesktop.css
4.53KB -
CSS Theme Tokens
build/css/bankingThemeLightMobile.css
4.52KB -
CSS Theme Tokens
build/css/bankingThemeDarkDesktop.css
4.52KB -
CSS Theme Tokens
build/css/paymentThemeLightDesktop.css
4.52KB -
CSS Theme Tokens
build/css/bankingThemeDarkMobile.css
4.51KB -
CSS Theme Tokens
build/css/paymentThemeLightMobile.css
4.51KB -
Web Utils
build/utils/index.production.web.js
3.29KB -
React Native Utils
build/utils/index.native.js
2.26KB -

Total files change +1B 0%

Final result: ✅

View report in BundleMon website ➡️


Current branch size history | Target branch size history

@kamleshchandnani
Copy link
Collaborator

Since there's no activity for a long time closing this. Pleas re-open when required

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants