ogticrd / cuenta-unica-registry

Portal de Registro de Cuenta Única
https://registro.cuentaunica.gob.do
MIT License
34 stars 3 forks source link

fix(ci): workflow delete service & correct permission #225

Closed UsernameAlvarez closed 3 months ago

UsernameAlvarez commented 3 months ago

Description

Check if service exists

checking for the existence of the service and the delete command only run if the service exists. This way some kind of errors will not occur

Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"

The job or workflow run requires a permissions setting with id-token: write. You won't be able to request the OIDC JWT ID token if the permissions setting for id-token is set to read or none.

The linting tool is flagging the specific permissions granted within the workflow as potentially problematic, even if "write-all" is not explicitly stated. More description about the issue is below, This seems like an issue with Checkov.

https://github.com/super-linter/super-linter/issues/5652