New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Secure GHA setup #290

Open

icemac opened this issue Nov 20, 2024 · 0 comments

Member

icemac commented Nov 20, 2024

FEATURE REQUEST

https://nedbatchelder.com/blog/202410/github_action_security_zizmor.html suggests to use zizmore to get suggestions how to secure the GHA setup.

It currently has one medium finding for our GHA config files:

warning[artipacked]: credential persistence through GitHub Actions artifacts
  --> .github/workflows/tests.yml:37:7
   |
37 |     - uses: actions/checkout@v4
   |       ------------------------- does not set persist-credentials: false
   |
   = note: audit confidence → Low

1 finding: 0 unknown, 0 informational, 0 low, 1 medium, 0 high

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment