secure-repo icon indicating copy to clipboard operation
secure-repo copied to clipboard

[KB] Add GitHub token permissions for dcodeIO/setup-node-nvm Action

Open step-security-bot opened this issue 2 years ago • 1 comments

Knowledge Base is missing for dcodeIO/setup-node-nvm.

step-security-bot avatar Oct 10 '22 20:10 step-security-bot

This action's action.yml & README.md doesn't contains any reference to GITHUB_TOKEN

action-security.yml

name: Set up node using nvm # dcodeIO/setup-node-nvm
# GITHUB_TOKEN not used

step-security-bot avatar Oct 10 '22 20:10 step-security-bot