Jaroslav Lobačevski
Jaroslav Lobačevski
@am0o0 Could you please change the pull request from draft to ready for review, so someone from JavaScript CodeQL team can take a look?
@dirkf Could you please confirm that the email to report potential security issues is fieldhousegmx.net?
Is it ready for review? I think it is useful addition.
Thank you for you report, I wasn't aware of that. I know that installing the monitor takes time and this is a potential overhead for every run. But a significant...
I just released https://github.com/GitHubSecurityLab/actions-permissions/releases/tag/v1.0.2-beta6 with a new mitmproxy version. Could you please try it?
As a workaround it is possible to run `pip3 list -o | cut -f1 -d' ' | tr " " "\n" | awk '{if(NR>=3)print}' | cut -d' ' -f1 |...
Hi, I have released a new version of `GitHubSecurityLab/actions-permissions` that fixes the `unknown permission` and also fixes running on MacOS 15. You should bump to `37c927c24552caa0ef6040ab0876db729cc12754`. However I looked at...
Though it looks like `This feature is included in the StepSecurity enterprise tier`.
Artifacts are strange beasts. Uploading artifacts doesn't use github token, so no permission is required. Downloading artifacts for public repositories doesn't require permissions. For private - `actions: read` is needed....