Skip to content

chore(ci): change token permissions / update aws-credentials action #5861

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jan 13, 2025

Conversation

leandrodamascena
Copy link
Contributor

Issue number: #5860

Summary

Changes

This PR implements token scope reduction for our critical pipelines to enhance security and improve our Scorecard rating. I'm also updating some actions that are not updated.

Changes:

  • Identified overly permissive tokens in pipelines
  • Reduced token scopes to minimum required permissions
  • Updated pipeline configurations to use new restricted tokens
  • Verified pipeline functionality with reduced scopes

User experience

No changes in customer experience.

Checklist

If your change doesn't seem to apply, please leave them unchecked.

Is this a breaking change?

RFC issue number:

Checklist:

  • Migration process documented
  • Implement warnings (if it can live side by side)

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

@leandrodamascena leandrodamascena requested a review from a team January 13, 2025 16:40
@boring-cyborg boring-cyborg bot added the github-actions Pull requests that update Github_actions code label Jan 13, 2025
@pull-request-size pull-request-size bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Jan 13, 2025
@github-actions github-actions bot added the internal Maintenance changes label Jan 13, 2025
@leandrodamascena leandrodamascena linked an issue Jan 13, 2025 that may be closed by this pull request
2 tasks
@leandrodamascena leandrodamascena merged commit 09001b2 into develop Jan 13, 2025
12 of 13 checks passed
@leandrodamascena leandrodamascena deleted the improve-security branch January 13, 2025 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
github-actions Pull requests that update Github_actions code internal Maintenance changes size/M Denotes a PR that changes 30-99 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Maintenance: Change permissions in workflow files
2 participants