Open kitplummer opened 2 years ago
and document them as known risks - e.g., running anything as root.
Also look into specifying use of deploy keys to ensure relationship between public repos and agents
GHA's sec scanner -> https://github.com/kitplummer/goa/security/code-scanning/40?query=ref%3Arefs%2Fheads%2Fdevelop
and document them as known risks - e.g., running anything as root.
Also look into specifying use of deploy keys to ensure relationship between public repos and agents