cisagov / cisagov/skeleton-python-library
Re-enable GitHub permissions monitoring when practical
Open
- Dominant language
- Shell
- Stars
- 32
- Forks
- 12
- PR merge metrics
- No merged PRs in 30d
Description
# 💡 Summary #
In #148 we disabled GitHub permissions monitoring because [this functionality](https://github.com/GitHubSecurityLab/actions-permissions/tree/main/monitor) is poorly implemented and has been causing GitHub actions workflows to fail or hang due to the MITM implementation hogging or leaking memory. This functionality should be re-enabled when this becomes practical.
## Motivation and context ##
It is useful to monitor GitHub permissions so ensure that we allow only the minimal required permissions. Once we can do so without unnecessary workflow failures we should.
Contributor guide
Assessment
This issue has not been assessed yet.