Skip to content

chore: set explicit workflow permissions and pin down actions#495

Merged
tdruez merged 1 commit intomainfrom
workflow-security
Mar 4, 2026
Merged

chore: set explicit workflow permissions and pin down actions#495
tdruez merged 1 commit intomainfrom
workflow-security

Conversation

@tdruez
Copy link
Contributor

@tdruez tdruez commented Mar 4, 2026

Changes

  • Set explicit permissions
  • Pin down all external actions to an exact commit
  • Do not persist-credentials after the checkout

Signed-off-by: tdruez <tdruez@aboutcode.org>
@tdruez tdruez merged commit acc2559 into main Mar 4, 2026
5 of 7 checks passed
@tdruez tdruez deleted the workflow-security branch March 4, 2026 01:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant