harden GitHub Actions workflows - #8620
Merged
Merged
Conversation
limzykenneth
reviewed
Mar 8, 2026
|
|
||
| permissions: | ||
| contents: read | ||
| issues: write |
Member
There was a problem hiding this comment.
@ksen0 Do you know this and the write permission in stewards-update.yml below is working?
3 tasks
Contributor
|
Is there a discussion about this implementation? It looks like it's implementing recommendations from zizmor, but zizmor itself is not in CI so any changes in future won't be validated against the same rule set. |
Member
ulgens
added a commit
to ulgens/p5.js
that referenced
this pull request
Aug 2, 2026
Thanks to https://github.com/suzuki-shunsuke/pinact * Follows the recommended pattern from processing#8674 (comment) * Complementary to processing#8620
This was referenced Aug 3, 2026
ulgens
added a commit
to ulgens/p5.js
that referenced
this pull request
Aug 10, 2026
Thanks to https://github.com/suzuki-shunsuke/pinact * Follows the recommended pattern from processing#8674 (comment) * Complementary to processing#8620
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This PR improves the security of our GitHub Actions workflows.