Skip to content

Maintenance: Change permissions in workflow files #5860

Closed

Description

@leandrodamascena

Why is this needed?

Our current pipeline requires a review of token permissions to enhance system security and improve our Scorecard score. We've identified that pipelines are using overly broad token scopes, which introduces unnecessary risk and don't adhere with best practices.

Image

Which area does this relate to?

Automation

Solution

No response

Acknowledgment

Activity

  1. github-actions commented on Jan 13, 2025

    @github-actions
    Contributor

    ⚠️COMMENT VISIBILITY WARNING⚠️

    This issue is now closed. Please be mindful that future comments are hard for our team to see.

    If you need more assistance, please either tag a team member or open a new issue that references this one.

    If you wish to keep having a conversation with other community members under this issue feel free to do so.

  2. github-actions commented on Jan 28, 2025

    @github-actions
    Contributor

    This is now released under 3.5.0 version!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    internalMaintenance changestriagePending triage from maintainers

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions