Javi Martín
|
3fa16bc882
|
Update checkout action to version 4
We were getting some warnings with version 3:
Node.js 16 actions are deprecated. Please update the following actions
to use Node.js 20: actions/checkout@v3. For more information see:
https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/
|
2024-03-01 23:46:30 +01:00 |
|
Javi Martín
|
b60d2f45b8
|
Update checkout action to version 3
We were getting a warning with version 2:
The following actions uses node12 which is deprecated and will be forced
to run on node16: actions/checkout@v2. For more info:
https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
2024-03-01 21:58:42 +01:00 |
|
nathannaveen
|
cac6194acd
|
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
|
2022-06-13 00:58:13 +00:00 |
|
Senén Rodero Rodríguez
|
079fd829a3
|
Setup a workflow to check Dockerfile build
Based on https://docs.docker.com/ci-cd/github-actions/
|
2021-04-15 12:53:35 +02:00 |
|