search

GitHubSecurityLab / actions-permissions

GitHub token permissions Monitor and Advisor actions
MIT License
256 stars 20 forks source link

permissions: unknown #7

Closed steveoh closed 1 year ago

steveoh commented 1 year ago

It appears when a workflow uses the graphql api the permissions cannot be determined. Is that a known limitation or something coming in the future?

JarLob commented 1 year ago

Yes, it is documented limitation: https://github.com/GitHubSecurityLab/actions-permissions/blob/8ecfc0d800e75e5774f8eebc81b3f48f214b8ca4/monitor/README.md?plain=1#L62 Though it should be doable, just some GraphQL parser is needed.