Varun Sharma

https://github.com/justinsteven/advisories/blob/master/2021_github_actions_checkspelling_token_leak_via_advice_symlink.md

Please add the Harden Runner GitHub Action https://github.com/step-security/harden-runner to the awesome-actions list. Thanks!

ci: add minimum GitHub token permissions for workflows

1

### Description This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows. GitHub Actions workflows have a GITHUB_TOKEN with `write` access to multiple scopes. Here...

### Description This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows. GitHub Actions workflows have a GITHUB_TOKEN with `write` access to multiple scopes. Here...

[GitHub] Add minimum GitHub token permission for workflow

1

## Description This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows. All GitHub Actions workflows have a GITHUB_TOKEN with `write` access to multiple scopes....

## Description This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows. GitHub Actions workflows have a GITHUB_TOKEN with `write` access to multiple scopes. Here...

ci: add GitHub token permissions for workflows

3

This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows. GitHub recommends defining minimum GITHUB_TOKEN permissions for securing GitHub Actions workflows - https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token/ - https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token...

ci: add GitHub token permissions for workflow

2

This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows. GitHub recommends defining minimum GITHUB_TOKEN permissions for securing GitHub Actions workflows - https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token/ - https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token...