search

django / daphne

Django Channels HTTP/WebSocket server
BSD 3-Clause "New" or "Revised" License
2.41k stars 269 forks source link

Potential security issues in GitHub Actions workflows #537

Open jiangnanpro opened 3 weeks ago

jiangnanpro commented 3 weeks ago

Potential security issues in GitHub Actions workflows

Hi! We are a research team from Radboud University in the Netherlands, currently working on security vulnerability analysis on GitHub Actions workflows. During our study, we found some potential issues in the workflow files of your repository and would like to bring them to your attention to help enhance security.

If you are interested, how would you like us to report it？

If you have any questions, please feel free to reach out! Thank you!

carltongibson commented 3 weeks ago

As far as I can see this isn't relevant. The action only installs the dependencies and runs the tests. Nothing sensitive.

jiangnanpro commented 3 weeks ago

Hi! Thank you for your feedback.