search

BirthdayResearch / jellyfishsdk

DeFiChain Jellyfish SDK & Ecosystem for building modern lite DeFi Applications at scale.
https://jellyfishsdk.com
MIT License
104 stars 37 forks source link

docker security hardening with workflow permissions #1151

Open fuxingloh opened 2 years ago

fuxingloh commented 2 years ago

For security hardening should add permission.

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs https://docs.github.com/en/rest/reference/permissions-required-for-github-apps

Originally posted by @fuxingloh in https://github.com/DeFiCh/jellyfish/pull/1092#r815676069

/triage accepted /assign @kodemon /kind feature /area apps workflow

fuxingloh commented 2 years ago

Low priority