secure-repo icon indicating copy to clipboard operation
secure-repo copied to clipboard

Published 20 hours ago • verified publisher icon step-security

[KB] Add KB for chrnorm/deployment-action

Open step-security-bot opened this issue 2 years ago • 1 comments

Knowledge Base is missing for chrnorm/deployment-action.

step-security-bot avatar Aug 12 '22 19:08 step-security-bot

Analysis

Action Name: chrnorm/deployment-action
Action Type: Node
GITHUB_TOKEN Matches: token,GITHUB_TOKEN,TOKEN
Top language: JavaScript
Stars: 103
Private: false
Forks: 56

Endpoints Found

Endpoint Permission
repos.createDeployment write
repos.createDeploymentStatus write

FollowUp Links.

https://github.com/chrnorm/deployment-action/blob/3afecce166a0a2f92d3a9e7351a9908a72121c24/lib/main.js

action-security.yml

name: 'Deployment Action'
github-token:
  action-input:
    input: token
    is-default: false
  permissions:
    contents: write

step-security-bot avatar Aug 12 '22 19:08 step-security-bot