nathannaveen
|
b03bd25855
|
chore: Set permissions for GitHub actions (#15300)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
|
2022-06-22 15:23:45 +02:00 |
TJ Lambert
|
07e9087f18
|
[GithubActions] Remove debugging dumps (#13063)
Co-authored-by: TJ Lambert <tjlambert@microsoft.com>
|
2021-10-21 10:12:17 -04:00 |
Rolf Bjarne Kvinge
|
2930c052b3
|
[actions] Fix name of the dotnet-maestro bot. (#12959)
|
2021-10-08 16:32:42 +02:00 |
|
Rolf Bjarne Kvinge
|
5fcd73b160
|
[actions] Fix yml syntax. (#12860)
|
2021-09-28 14:33:10 -04:00 |
|
Rolf Bjarne Kvinge
|
8ba7ff3324
|
[actions] Skip the label checker for pull requests from 'dotnet-maestro'. (#12823)
|
2021-09-23 15:15:51 -04:00 |
|
TJ Lambert
|
240a73d710
|
[Actions ] Add github actions to the ignore list (#12075)
Co-authored-by: tj_devel709 <antlambe@microsoft.com>
|
2021-07-07 11:50:50 -04:00 |
Manuel de la Pena
|
031e14f1a3
|
[Actions] Add the user to all branches. Remove monojenkins. (#10368)
|
2021-01-08 16:21:41 -05:00 |
|
Manuel de la Pena
|
f218681d7b
|
[Actions] Ensure the new bot is considered. (#10352)
@monojenkins is no more.
|
2021-01-07 15:41:00 -05:00 |
|
Manuel de la Pena
|
27e73eeeef
|
[Actions] Add debug for the workflow to find why it does not work with hub. (#10008)
|
2020-10-29 22:37:46 -04:00 |
|
Manuel de la Pena
|
923aef0838
|
[Actions] Fix the if condition. Return error with empty labels. (#9967)
|
2020-10-26 15:56:03 -04:00 |
|
Manuel de la Pena
|
a5d2fe7280
|
[Actions] Ignore the monojenkins check for now
|
2020-10-26 14:57:51 -04:00 |
|
Manuel de la Pena
|
093938e926
|
[Actions] If we have no labels and we are not monojenkins, fail. (#9963)
|
2020-10-26 14:48:07 -04:00 |