secure-repo icon indicating copy to clipboard operation
secure-repo copied to clipboard

Published 20 hours ago • verified publisher icon step-security

[KB] Add KB for alexellis/upload-assets

Open step-security-bot opened this issue 2 years ago • 1 comments

Knowledge Base is missing for alexellis/upload-assets.

step-security-bot avatar Aug 09 '22 01:08 step-security-bot

Analysis

Action Name: alexellis/upload-assets
Action Type: Node
GITHUB_TOKEN Matches: GITHUB_TOKEN,token
Top language: JavaScript
Stars: 31
Private: false
Forks: 6

Endpoints Found

Endpoint Permission
repos.uploadReleaseAsset write
repos.get read
repos.getRelease read
repos.getReleaseByTag read

FollowUp Links.

https://github.com/alexellis/upload-assets/blob/9e94dcf277d4c86fdac84b857a6b4ea08f077f1e/src/lib.js https://github.com/alexellis/upload-assets/blob/9e94dcf277d4c86fdac84b857a6b4ea08f077f1e/dist/index.js

action-security.yml

name: 'Upload Release Assets'
github-token:
  environment-variable-name: <FigureOutYourself>
    is-default: false
  permissions:
    contents: write

step-security-bot avatar Aug 09 '22 01:08 step-security-bot