cicd/build-push-action
Public Access
1
0
Fork 0
mirror of https://github.com/docker/build-push-action.git synced 2026-05-22 10:47:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1537 from crazy-max/zizmor-fixes

Browse Source 
ci: restrict update-dist GitHub App token scope
This commit is contained in:
CrazyMax
2026-05-21 14:57:22 +02:00
committed by GitHub
parent 789f686580 69b698e993
commit e46f50c06e
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/update-dist.yml
+2
View File
@@ -26,6 +26,8 @@ jobs:
app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
owner: docker
repositories: build-push-action
permission-contents: write
-
name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2