openclarity / apiclarity

An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks. 
https://apiclarity.io
Apache License 2.0
498 stars 64 forks source link

Add granular permissions to GitHub action workflows #361

Closed FrimIdan closed 11 months ago

FrimIdan commented 11 months ago

same as https://github.com/openclarity/kubeclarity/commit/cbbfee3e29379233fd5c24ed5f16ecfa21a0da33

This commit adds granular permissions to the workflows that need them to perform their tasks.

The release action needs access to the "contents" of a repo in order to create a release, and requires access to packages in order to publish the containers.

The docker action only needs access to packages to publish the "latest" build from the main branch.