kexa-io / Kexa

Kexa's simple rules (Open Source) make it easy to monitoring and manage alerting of your entire cloud. With various monitoring and alerting options, instant and detailed alerts, easy-to-deploy and low in infrastructure costs, in turns complexity into simplicity.
https://www.kexa.io
Apache License 2.0
101 stars 3 forks source link

[StepSecurity] ci: Harden GitHub Actions #214

Closed step-security-bot closed 2 months ago

step-security-bot commented 2 months ago

Summary

This pull request is created by StepSecurity at the request of @estebanmathia. Please merge the Pull Request to incorporate the requested changes. Please tag @estebanmathia on your message if you have any questions related to the PR.

Security Fixes

Least Privileged GitHub Actions Token Permissions

The GITHUB_TOKEN is an automatically generated secret to make authenticated calls to the GitHub API. GitHub recommends setting minimum token permissions for the GITHUB_TOKEN.

Signed-off-by: StepSecurity Bot bot@stepsecurity.io