Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remediate OpenSSF flagged issues #24

Merged
merged 1 commit into from
May 31, 2024
Merged

Remediate OpenSSF flagged issues #24

merged 1 commit into from
May 31, 2024

Conversation

carlewis
Copy link
Contributor

Solve some of the issues flagged by OSSF Scorecard:

  • Add top-level permissions to CodeQL workflow
  • Add top-level permissions to CI workflow
  • Pin docker image by hash
  • Pin github actions by hash

ci/Dockerfile Outdated Show resolved Hide resolved
* Add top-level permissions to CodeQL workflow
* Add top-level permissions to CI workflow
* Pin docker image by hash
* Pin github actions by hash
@carlewis carlewis merged commit 8e01ced into main May 31, 2024
12 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants