ChainSafe / ChainSafe/lodestar
Restrict GITHUB_TOKEN access on workflows
Open
prio-low
scope-security
- Dominant language
- TypeScript
- Stars
- 1.4k
- Forks
- 483
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 150
Description
Github now allows to restrict what the GITHUB_TOKEN can do. This is a great feature that we must use
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
Contributor guide
Assessment
This issue has not been assessed yet.