intel-retail / automated-self-checkout

The Intel® Automated Self-Checkout Reference Package provides critical components required to build and deploy a self-checkout use case using Intel® hardware, software, and other open-source components.
https://intel-retail.github.io/documentation/use-cases/automated-self-checkout/automated-self-checkout.html
Apache License 2.0
26 stars 21 forks source link

[StepSecurity] ci: Harden GitHub Actions #594

Closed step-security-bot closed 3 months ago

step-security-bot commented 3 months ago

Summary

This pull request is created by StepSecurity at the request of @rdower. Please merge the Pull Request to incorporate the requested changes. Please tag @rdower on your message if you have any questions related to the PR.

Security Fixes

Least Privileged GitHub Actions Token Permissions

The GITHUB_TOKEN is an automatically generated secret to make authenticated calls to the GitHub API. GitHub recommends setting minimum token permissions for the GITHUB_TOKEN.

Feedback

For bug reports, feature requests, and general feedback; please email support@stepsecurity.io. To create such PRs, please visit https://app.stepsecurity.io/securerepo.

Signed-off-by: StepSecurity Bot bot@stepsecurity.io