Fabian Kammel

icon indicating a website link https://blog.kammel.dev

icon company control-plane.io icon location Berlin, Germany icon location Principal Security Consultant @controlplaneio

Results 23 comments of Fabian Kammel
trafficstars

Support setting for repository wide read-only token

I have just checked the GitHub API and discovered this endpoint: https://docs.github.com/en/rest/actions/permissions?apiVersion=2022-11-28#get-default-workflow-permissions-for-a-repository Would this allow Scorecard to query the repository settings?

Support setting for repository wide read-only token

We indeed use the scorecard action: https://github.com/edgelesssys/constellation/blob/main/.github/workflows/scorecard.yml

Content Security Policy breaks login for localhost on Chrome

That's the configuration I am using, it should have all the information. ``` class: account class: memberof class: oauth2_resource_server class: oauth2_resource_server_public class: object directmemberof: [email protected] displayname: k8s es256_private_key_der: private_binary image:...