We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent eeb938a commit 93fbb9fCopy full SHA for 93fbb9f
actions/ql/src/Security/CWE-275/MissingActionsPermissions.ql
@@ -1,6 +1,6 @@
1
/**
2
* @name Workflow does not contain permissions
3
- * @description Workflows should contain permissions to provide a clear understanding has permissions to run the workflow.
+ * @description Workflows should contain explicit permissions to restrict the scope of the default GITHUB_TOKEN.
4
* @kind problem
5
* @security-severity 5.0
6
* @problem.severity warning
0 commit comments