feat: lockdown github actions versions and permissions - Githubissues

Azure / ShieldGuard

Enables best security practices for your project from day zero.

MIT License

8 stars 6 forks source link

feat: lockdown github actions versions and permissions #90

Closed bcho closed 7 months ago

bcho commented 7 months ago

This pull request lockdown the actions versions to commit and specified permissions in job level.

Verified in my fork repo:

build pr: https://github.com/bcho/ShieldGuard/pull/1
release build: https://github.com/bcho/ShieldGuard/actions/runs/7630392569/job/20785955079

unit test permissions:

lint test permissions:

release permissions:

release artifacts: