ci: harden workflows - Githubissues

prettier / eslint-config-prettier

Turns off all rules that are unnecessary or might conflict with Prettier.

MIT License

5.39k stars 255 forks source link

Closed Fdawgs closed 1 year ago

Fdawgs commented 1 year ago

This PR:

Removes Git credentials/SSH keys after checkout as a security precaution by setting persist-credentials to false, they are not used after the initial checkout
Declares the minimum permissions for CI workflows to run at the workflow level, following principle of least privilege; see related GitHub security post

lydell commented 1 year ago

Let’s try this. Thanks!