feat(.github/workflows): stricter GitHub token default permission compliance#2849

Merged

darccio merged 25 commits intomainfrom dario.castane/VULN-8316/insecure-default-workflow-permissions

Sep 26, 2024

+41

Commits on Sep 9, 2024

feat(.github/workflows): restrict appsec jobs to content read-only permission
darccio
committed
feat(.github/workflows): restrict DataDog Static Analysis jobs to right permissions
darccio
committed
chore: trigger DataDog Static Analysis
darccio
committed
chore: trigger DataDog Static Analysis with fake bearer token
darccio
committed
chore: trigger DataDog Static Analysis with fake bearer token in Go code
darccio
committed
feat: reduce DataDog Static Analysis to content read-only permission
darccio
committed
feat: reduce ecosystems labels' jobs to right permissions
darccio
committed
chore: trigger ecosystems labelling
darccio
committed
feat: reduce govunlcheck jobs to right permissions
darccio
committed
feat: reduce main branch, multi OS unit tests, and integration tests' jobs to right permissions
darccio
committed
feat: reduce parametric tests' jobs to right permissions
darccio
committed
feat: reduce smoke tests' jobs to right permissions
darccio
committed
feat: reduce stale labelling's jobs to right permissions
darccio
committed
feat: reduce system tests' jobs to right permissions
darccio
committed
feat: reduce test apps' jobs to right permissions
darccio
committed
chore: drop current PR branch from smoke-tests
darccio
committed
chore: test ecosystems-label-pr job
darccio
committed
chore: test ecosystems-label-pr job with contents write permission
darccio
committed
chore: test ecosystems-label-pr job with permissions at job level
darccio
committed
chore: test ecosystems-label-pr job with pull-requests permission
darccio
committed
chore: test ecosystems-label-pr job without issues permission
darccio
committed
chore: restrict ecosystems-label-pr job to specific types for PRs
darccio
committed
chore: remove contrib fake edit to trigger labeller
darccio
committed
feat: add pull-requests write permission to DataDog Static Analysis' jobs
darccio
committed

Commits on Sep 26, 2024

Merge branch 'main' into dario.castane/VULN-8316/insecure-default-workflow-permissions
darccio
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(.github/workflows): stricter GitHub token default permission compliance#2849

Commits on Sep 9, 2024

feat(.github/workflows): restrict appsec jobs to content read-only permission

feat(.github/workflows): restrict DataDog Static Analysis jobs to right permissions

chore: trigger DataDog Static Analysis

chore: trigger DataDog Static Analysis with fake bearer token

chore: trigger DataDog Static Analysis with fake bearer token in Go code

feat: reduce DataDog Static Analysis to content read-only permission

feat: reduce ecosystems labels' jobs to right permissions

chore: trigger ecosystems labelling

feat: reduce govunlcheck jobs to right permissions

feat: reduce main branch, multi OS unit tests, and integration tests' jobs to right permissions

feat: reduce parametric tests' jobs to right permissions

feat: reduce smoke tests' jobs to right permissions

feat: reduce stale labelling's jobs to right permissions

feat: reduce system tests' jobs to right permissions

feat: reduce test apps' jobs to right permissions

chore: drop current PR branch from smoke-tests

chore: test ecosystems-label-pr job

chore: test ecosystems-label-pr job with contents write permission

chore: test ecosystems-label-pr job with permissions at job level

chore: test ecosystems-label-pr job with pull-requests permission

chore: test ecosystems-label-pr job without issues permission

chore: restrict ecosystems-label-pr job to specific types for PRs

chore: remove contrib fake edit to trigger labeller

feat: add pull-requests write permission to DataDog Static Analysis' jobs

Commits on Sep 26, 2024

Merge branch 'main' into dario.castane/VULN-8316/insecure-default-workflow-permissions