search

githubuniverseworkshops / workflow-script-injection

Understanding the risk of script Injections in GitHub Actions workflows
MIT License
4 stars 4 forks source link

The prerequisite instructions need more detail. #11

Open dkian214 opened 10 months ago

dkian214 commented 10 months ago

Should I clone the repo as public or private? Should I clone the repo to a new Organization and start a trial license of Enterprise and GHAS?

decyjphr commented 10 months ago

Please ~clone~ use this repo as a template and create a new public repo in your personal space. Public repos should get Actions and GHAS as free entitlement.

mbkumar commented 10 months ago

@decyjphr How do I use this repo as a template to create a new repo? I looked at the documentation, but I am not finding the corresponding buttons/links to do that.

decyjphr commented 10 months ago

When you go to the repo home page https://github.com/githubuniverseworkshops/workflow-script-injection/ , you should see the green button as shown below:

Image

decyjphr commented 10 months ago

Please login into GitHub before you access the repo. I don't believe you will see the Use this template button if you are not logged in.

mbkumar commented 10 months ago

I logged into the GitHub. But I am not seeing the green button.

decyjphr commented 10 months ago

Are you logging in as an Enterprise Managed user? You should use your personal account since Enterprise Managed User accounts have restrictions for interacting with public repos.