superlint/.github
nathannaveen 4471e9f322
Set permissions for GitHub actions (#2752)
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-04-11 14:52:49 -05:00
..
ISSUE_TEMPLATE switch to main branch (#2010) 2021-10-01 12:57:26 -07:00
linters Use ts-standard instead of standard as TYPESCRIPT_STANDARD (#2614) 2022-03-16 10:21:57 -05:00
scripts Disable bin/activate 2022-02-22 11:47:16 -05:00
workflows Set permissions for GitHub actions (#2752) 2022-04-11 14:52:49 -05:00
CODEOWNERS Update CODEOWNERS 2022-04-05 13:15:31 -05:00
CONTRIBUTING.md switch to main branch (#2010) 2021-10-01 12:57:26 -07:00
dependabot.yml Update Dependabot for python virtual envs 2022-01-11 10:05:56 -05:00
pull_request-template.md Update pull_request-template.md 2020-09-05 03:32:19 +09:00
release-drafter.yml Cleanup YAML Linting and Enable Rules (#2301) 2022-01-06 09:59:15 -06:00