Naveen
|
4577254e20
|
chore: Set permissions for GitHub actions (#3880)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
|
2022-06-11 18:04:11 +02:00 |
|
Igor Pečovnik
|
7f556dc1b9
|
Assemble needed runs into a GH Actions build train (#3366)
|
2021-12-25 23:05:04 +01:00 |
|
Igor Pečovnik
|
36d0bdcaff
|
Varius updates to CI scripts (#3359)
* RFC u-boot CI to more modern way
|
2021-12-19 01:02:16 +01:00 |
|
Igor Pečovnik
|
c0ef5f0666
|
Improve CI test builds (#3327)
|
2021-12-07 20:13:15 +01:00 |
|
Igor Pečovnik
|
b054239120
|
Enable desktop packages creation after kernel is built (#3324)
|
2021-12-06 23:53:39 +01:00 |
|
Igor Pečovnik
|
9c730fb27b
|
Github actions - adding desktop package builder (#3323)
* Cleanup
* Adding desktop package builder
|
2021-12-06 21:03:48 +01:00 |
|
Igor Pečovnik
|
2ab8795ae9
|
Github actions fixes (#3319)
|
2021-12-05 17:39:26 +01:00 |
|
Igor Pečovnik
|
2aa23f485e
|
A pack of CI fixes (#3315)
|
2021-12-04 23:42:10 +01:00 |
|
Igor Pečovnik
|
43b4d75fb2
|
Several tiny improvements of GH actions (#3304)
|
2021-12-02 00:34:15 +01:00 |
|
Igor Pečovnik
|
a55122a1d2
|
Another pack of updates for Github actions (#3288)
|
2021-11-23 22:37:06 +01:00 |
|
Igor Pečovnik
|
21f13b4ba5
|
CI pipeline refactoring (#3173)
|
2021-10-06 22:47:23 +02:00 |
|
Igor Pečovnik
|
281848127d
|
Update update-repository.yml
|
2021-10-05 08:55:35 +02:00 |
|
Igor Pecovnik
|
82dc4dbb73
|
Moving update repository in separate action
|
2021-10-05 08:06:02 +02:00 |
|