New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: harden workflows #232

Merged

lydell merged 1 commit into prettier:main from Fdawgs:ci/actions

Jan 1, 2023

Contributor

Fdawgs commented Nov 8, 2022

This PR:

Removes Git credentials/SSH keys after checkout as a security precaution by setting persist-credentials to false, they are not used after the initial checkout
Declares the minimum permissions for CI workflows to run at the workflow level, following principle of least privilege; see related GitHub security post


          ci: harden workflows

7e3bb67

lydell merged commit 1218d22 into prettier:main

Member

lydell commented Jan 1, 2023

Let’s try this. Thanks!

Fdawgs deleted the ci/actions branch

January 1, 2023 11:13

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment