search

psalm / psalm-github-security-scan

Psalm Security Scanning for GitHub Actions
53 stars 17 forks source link

Explicitly specify job permission to publish new Docker images on GHCR #8

Closed eroullit closed 1 year ago

eroullit commented 1 year ago

The goal of this pull request is to explicitly grant Write permissions to packages to the job in charge of publishing images to GHCR.

The contents permissions is set to read to allow the job to checkout the code.

All other permissions are set to none by default.