Task/npt 1102 resolve checkov top level permission error#29
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| permissions: | ||
| contents: read | ||
| id-token: write |
Check notice
Code scanning / SonarCloud
Write permissions should be defined at the job level Low
| # checkov:skip=CKV2_GHA_1: "Ensure top-level permissions are not set to write-all. TODO- NPT-1102" | ||
|
|
||
| permissions: | ||
| contents: read |
Check notice
Code scanning / SonarCloud
Read permissions should be defined at the job level Low
|
|
||
| permissions: | ||
| contents: read | ||
| id-token: write |
Check notice
Code scanning / SonarCloud
Write permissions should be defined at the job level Low
| name: "CI/CD deploy" | ||
|
|
||
| permissions: | ||
| contents: read |
Check notice
Code scanning / SonarCloud
Read permissions should be defined at the job level Low
|
|
||
| permissions: | ||
| contents: read | ||
| id-token: write |
Check notice
Code scanning / SonarCloud
Write permissions should be defined at the job level Low
| name: "CI/CD deploy sandbox API" | ||
|
|
||
| permissions: | ||
| contents: read |
Check notice
Code scanning / SonarCloud
Read permissions should be defined at the job level Low
|
|
||
| permissions: | ||
| contents: read | ||
| id-token: write |
Check notice
Code scanning / SonarCloud
Write permissions should be defined at the job level Low
| name: "Commit stage" | ||
|
|
||
| permissions: | ||
| contents: read |
Check notice
Code scanning / SonarCloud
Read permissions should be defined at the job level Low
| name: "Test stage" | ||
|
|
||
| permissions: | ||
| contents: read |
Check notice
Code scanning / SonarCloud
Read permissions should be defined at the job level Low
| name: "Acceptance stage" | ||
|
|
||
| permissions: | ||
| contents: read |
Check notice
Code scanning / SonarCloud
Read permissions should be defined at the job level Low
1 participant
Description
Context
Type of changes
Checklist
Sensitive Information Declaration
To ensure the utmost confidentiality and protect your and others privacy, we kindly ask you to NOT including PII (Personal Identifiable Information) / PID (Personal Identifiable Data) or any other sensitive data in this PR (Pull Request) and the codebase changes. We will remove any PR that do contain any sensitive information. We really appreciate your cooperation in this matter.