Skip to content

feat(linter): add Workflow Permissions Analysis with @GitHubSecurityLab/actions-permissions #346

@neilime

Description

@neilime

Is your feature request related to a problem? Please describe.
To proactively improve security, we want to analyze and optimize workflow permissions in our .github/workflows/linter.yml using the @GitHubSecurityLab/actions-permissions action.

Describe the solution you'd like
Integrate the @GitHubSecurityLab/actions-permissions action into the linter.yml workflow. The permissions analysis should ideally run as a separate job or step after the linter checks, follow GitHub best practices, and be well-documented.

Describe alternatives you've considered
Manually auditing and reviewing workflow permissions periodically, but automated analysis with the GitHubSecurityLab action is preferred for consistency and optimization.

Additional context
See the actions-permissions documentation for configuration details.

Metadata

Metadata

Labels

github_actionsPull requests that update GitHub Actions code

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions