Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add main workflow #38

Merged
merged 1 commit into from
Nov 27, 2024
Merged

Add main workflow #38

merged 1 commit into from
Nov 27, 2024

Conversation

lloeki
Copy link
Member

@lloeki lloeki commented Nov 27, 2024

No description provided.

@@ -0,0 +1,21 @@
name: Main

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟠 Code Vulnerability

No explicit permissions set for at the workflow level (...read more)

Datadog’s GitHub organization defines default permissions for the GITHUB_TOKEN to be restricted (contents:read, metadata:read, and packages:read).

Your repository may require a different setup, so consider defining permissions for each job following the least privilege principle to restrict the impact of a possible compromise.

You can find the list of all possible permissions in Workflow syntax for GitHub Actions - GitHub Docs. They can be defined at the job or the workflow level.

View in Datadog  Leave us feedback  Documentation

@lloeki lloeki force-pushed the lloeki/add-main-workflow branch 2 times, most recently from 58683e1 to aeb7b36 Compare November 27, 2024 11:13
@lloeki lloeki marked this pull request as ready for review November 27, 2024 11:21
@lloeki lloeki requested a review from a team as a code owner November 27, 2024 11:21
Base automatically changed from lloeki/pin-actions to main November 27, 2024 12:08
@lloeki lloeki merged commit dd69258 into main Nov 27, 2024
51 checks passed
@lloeki lloeki deleted the lloeki/add-main-workflow branch November 27, 2024 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants