Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

#62221 GitHub Actions workflow hardening #8007

Draft
wants to merge 23 commits into
base: trunk
Choose a base branch
from
Draft

#62221 GitHub Actions workflow hardening #8007

wants to merge 23 commits into from
+390 −129

Conversation

johnbillion
Copy link
Member

@johnbillion
Use existing environment variables in place of GitHub Actions express…
2e87b77 
…ions in JavaScript steps.
@johnbillion
Make more use of environment variables in JavaScript steps.
39026ab
@johnbillion
Prevent breaking out of environment variable assignment.
1d1ee67
@johnbillion
Prevent breaking out of command arguments.
878b800
@johnbillion
Remove a redundant step.
b2ace91
@johnbillion
Use an environment variable in this JavaScript step.
47ba701
@johnbillion
Clearer formatting for these dynamic command arguments.
fc746fb
@johnbillion
Replace manual construction of JSON with safe output from jq.
5548281
@johnbillion
Break this long line into multiple lines for clarity and replace GitH…
c0c49a1 
…ub Actions expressions with environment variables.
@johnbillion
Replace some more logic with environment variables.
1143dca
@johnbillion
More formatting for readability.
896fee1
@johnbillion
Replace more GitHub Actions expressions with environment variables.
32146c2
@johnbillion
Disable permissions for all available scopes by default.
e869cb8
@johnbillion
Add a linting workflow while we continue working on workflow hardening.
5ea1b0d
@johnbillion
Correct this flag.
9a6c833
@johnbillion
None of the checkouts need credentials to be persisted.
127221a
@johnbillion
Disable false positive shellcheck errors for these jq inputs.
7f038d8
@johnbillion
Fix a syntax error.
8b78bb1
@github-actions GitHub Actions

This comment was marked as off-topic.

Sign in to view
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@johnbillion