Skip to content

Set Actions token permissions to minimum required. #1014

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Jun 20, 2025
Merged

Set Actions token permissions to minimum required. #1014

merged 2 commits into from
Jun 20, 2025

Conversation

kpfleming
Copy link
Contributor

@kpfleming kpfleming commented Jun 20, 2025 •
edited
Loading

Each of the three Actions workflows requires fewer permissions than GITHUB_TOKEN has by default, so each of them are now configured with the minimum permissions required.

Resolves https://github.com/fastly/terraform-provider-fastly/security/code-scanning/20, https://github.com/fastly/terraform-provider-fastly/security/code-scanning/21, and https://github.com/fastly/terraform-provider-fastly/security/code-scanning/22.

All Submissions:

  • Have you followed the guidelines in our Contributing document?
  • Have you checked to ensure there aren't other open Pull Requests for the same update/change?

@kpfleming
Set Actions token permissions to minimum required.
4c0d184 
Each of the three Actions workflows requires fewer permissions than
GITHUB_TOKEN has by default, so each of them are now configured with
the minimum permissions required.
@kpfleming kpfleming requested a review from a team as a code owner June 20, 2025 20:45
@kpfleming kpfleming added the Skip-Changelog Skip changelog build check label Jun 20, 2025
anthony-gomez-fastly
anthony-gomez-fastly approved these changes Jun 20, 2025
View reviewed changes
Copy link
Contributor

@anthony-gomez-fastly anthony-gomez-fastly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM TY

@kpfleming kpfleming merged commit 5534bce into fastly:main Jun 20, 2025
11 checks passed
@kpfleming kpfleming deleted the fix-actions-workflows branch June 20, 2025 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@anthony-gomez-fastly anthony-gomez-fastly anthony-gomez-fastly approved these changes

Assignees
No one assigned
Labels
Skip-Changelog Skip changelog build check
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@kpfleming @anthony-gomez-fastly