cisagov / cisagov/skeleton-python-library

Re-enable GitHub permissions monitoring when practical

Open
#149 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
32
Forks
12
PR merge metrics
No merged PRs in 30d

Description

# 💡 Summary #

In #148 we disabled GitHub permissions monitoring because [this functionality](https://github.com/GitHubSecurityLab/actions-permissions/tree/main/monitor) is poorly implemented and has been causing GitHub actions workflows to fail or hang due to the MITM implementation hogging or leaking memory. This functionality should be re-enabled when this becomes practical.

## Motivation and context ##

It is useful to monitor GitHub permissions so ensure that we allow only the minimal required permissions. Once we can do so without unnecessary workflow failures we should.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.