diff --git a/knowledge-base/actions/alexellis/upload-assets/action-security.yml b/knowledge-base/actions/alexellis/upload-assets/action-security.yml new file mode 100644 index 000000000..3741afdcd --- /dev/null +++ b/knowledge-base/actions/alexellis/upload-assets/action-security.yml @@ -0,0 +1,10 @@ +name: 'Upload Release Assets' +github-token: + environment-variable-name: GITHUB_TOKEN + permissions: + contents: write + contents-reason: to upload release assets + #Reference: https://github.com/alexellis/upload-assets/blob/9e94dcf277d4c86fdac84b857a6b4ea08f077f1e/dist/index.js + #https://github.com/alexellis/upload-assets/blob/9e94dcf277d4c86fdac84b857a6b4ea08f077f1e/src/lib.js + + diff --git a/knowledge-base/actions/chrnorm/deployment-action/action-security.yml b/knowledge-base/actions/chrnorm/deployment-action/action-security.yml new file mode 100644 index 000000000..dcf4644b8 --- /dev/null +++ b/knowledge-base/actions/chrnorm/deployment-action/action-security.yml @@ -0,0 +1,10 @@ +name: "Deployment Action" +github-token: + action-input: + input: token + is-default: false + permissions: + deployments: write + deployments-reason: to create Github Deployments + #Reference: https://github.com/chrnorm/deployment-action#readme + # https://github.com/chrnorm/deployment-action/blob/81b5fe715539b0ed9bfb8337b3508f15b288b4bd/lib/main.js diff --git a/knowledge-base/actions/chrnorm/deployment-status/action-security.yml b/knowledge-base/actions/chrnorm/deployment-status/action-security.yml new file mode 100644 index 000000000..db4223e07 --- /dev/null +++ b/knowledge-base/actions/chrnorm/deployment-status/action-security.yml @@ -0,0 +1,9 @@ +name: "Deployment Status" +github-token: + action-input: + input: token + is-default: false + permissions: + deployments: write + deployments-reason: to update status of deployments + #Reference: https://github.com/chrnorm/deployment-status/blob/8a81fd4d7b467e95818f2c6a1b5b228de211e90c/src/main.ts diff --git a/knowledge-base/actions/eberlitz/lcov-reporter-action/action-security.yml b/knowledge-base/actions/eberlitz/lcov-reporter-action/action-security.yml new file mode 100644 index 000000000..9487af20b --- /dev/null +++ b/knowledge-base/actions/eberlitz/lcov-reporter-action/action-security.yml @@ -0,0 +1,11 @@ +name: "Code Coverage Report" +github-token: + action-input: + input: github_token + is-default: false + permissions: + contents: write + contents-reason: to create commit comment with code coverage + issues: write + issues-reason: to comment code coverage on pr + #Reference: https://github.com/eberlitz/lcov-reporter-action diff --git a/knowledge-base/actions/irongut/editrelease/action-security.yml b/knowledge-base/actions/irongut/editrelease/action-security.yml index 8ccef01f2..40e2c4f4c 100644 --- a/knowledge-base/actions/irongut/editrelease/action-security.yml +++ b/knowledge-base/actions/irongut/editrelease/action-security.yml @@ -1,4 +1,4 @@ -name: 'Edit Release' +name: "Edit Release" # irongut/EditRelease github-token: action-input: