New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci(node.js): update workflow #138

Merged

75lb merged 1 commit into 75lb:master from Fdawgs:patch-1

Nov 18, 2024

Contributor

Fdawgs commented Nov 18, 2024 •

edited

Loading

This PR:

Removes Git credentials/SSH keys after checkout as a security precaution by setting persist-credentials to false. They are not used after the initial checkout, and this stops them from accidentally leaking through a script
Declares the minimum permissions for the workflow to run at the job level, following principle of least privilege; see related GitHub security post


          ci(node.js): update workflow

75657d4

75lb merged commit fdb7af8 into 75lb:master

14 checks passed

Owner

75lb commented Nov 18, 2024

thanks 👍

Fdawgs deleted the patch-1 branch

November 18, 2024 13:04

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet