Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 08:58:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 111

Fix code scanning issues with golangci-lint.yml (#4606)

Browse source 
Making permissions more restricted to reduce impact if token leaked, and pinning dependencies more strictly.
This commit is contained in:
Guillaume Ross 2022-03-15 14:44:30 -04:00 committed by GitHub
parent 9f254a6de5
commit b620d2b7d8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
.github/workflows/golangci-lint.yml vendored
View file

@ -11,14 +11,20 @@ on:
- '**.go'
workflow_dispatch: # Manual
permissions:
contents: read
jobs:
golangci:
permissions:
contents: read # for actions/checkout to fetch code
pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
name: lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2
- name: golangci-lint
uses: golangci/golangci-lint-action@v2
uses: golangci/golangci-lint-action@5c56cd6c9dc07901af25baab6f2b0d9f3b7c3018 # v2
with:
# Required: the version of golangci-lint is required and must be
# specified without patch version: we always use the latest patch