Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: Restrict token permissions in gitbook workflow #739

Merged
merged 1 commit into from Jan 26, 2024

Conversation

cpswan
Copy link
Member

@cpswan cpswan commented Jan 26, 2024

Fixes https://github.com/atsign-foundation/noports/security/code-scanning/17

Should also clear https://github.com/atsign-foundation/noports/security/code-scanning/18 which appears to be a false positive

- What I did

  • Added section to make token permissions read only
  • Tidied up some white space

- How to verify it

https://github.com/atsign-foundation/noports/security/code-scanning/17 should clear when merged

- Description for the changelog

ci: Restrict token permissions in gitbook workflow

@cpswan cpswan self-assigned this Jan 26, 2024
@gkc gkc merged commit 49dd838 into trunk Jan 26, 2024
6 checks passed
@gkc gkc deleted the cpswan-token-permissions branch January 26, 2024 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants