secure-repo icon indicating copy to clipboard operation
secure-repo copied to clipboard

Published 20 hours ago • verified publisher icon step-security

[KB] Add KB for dsaltares/fetch-gh-release-asset

Open step-security-bot opened this issue 3 years ago • 1 comments

Knowledge Base is missing for dsaltares/fetch-gh-release-asset.

step-security-bot avatar Aug 04 '22 15:08 step-security-bot

Analysis

Action Name: dsaltares/fetch-gh-release-asset
Action Type: Node
GITHUB_TOKEN Matches: token,GITHUB_TOKEN
Top language: TypeScript
Stars: 56
Private: false
Forks: 51

Endpoints Found

Endpoint Permission
repos.get read
repos.getLatestRelease read
repos.getRelease read
repos.getReleaseByTag read

FollowUp Links.

https://github.com/dsaltares/fetch-gh-release-asset/blob/d9376dacd30fd38f49238586cd2e9295a8307f4c/index.ts

action-security.yml

name: 'Fetch Github Release Asset'
github-token:
  action-input:
    input: token
    is-default: true
  permissions:
    contents: read

step-security-bot avatar Aug 04 '22 15:08 step-security-bot