jlengrand/error-prone-support
1
0
Fork 0
mirror of https://github.com/jlengrand/error-prone-support.git synced 2026-03-10 08:11:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Have step-security/harden-runner audit the OpenSSF Scorecard update workflow (#1076)

Browse Source 
When executed on `master` this workflow requires additional permissions;
let's find out what they are.
This commit is contained in:
Stephan Schroevers
2024-03-12 08:07:16 +01:00
committed by GitHub
parent 3b005b0edc
commit df701d3d3c
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/openssf-scorecard.yml vendored
View File

@@ -23,12 +23,8 @@ jobs:
- name: Install Harden-Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
api.osv.dev:443
github.com:443
# XXX: Replace with `block` policy.
egress-policy: audit
- name: Check out code
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with: