Skip to content

Commit 3e1bcb9

Browse files
jeffwidmanjeffwidman
authored
Scope app token to only this repo for security (#501)
#442 bumped to a new version of this action which now supports a `"repositories"` key that scopes the token to the designated repositories.
1 parent 7187f39 commit 3e1bcb9

File tree

4 files changed

+4
-0
lines changed

4 files changed

+4
-0
lines changed

‎.github/workflows/dependabot-auto-merge.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ jobs:
1313
with:
1414
app_id: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_APP_ID }}
1515
private_key: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_PRIVATE_KEY }}
16+
repositories: "dependabot/fetch-metadata"
1617

1718
- name: Check out code
1819
uses: actions/checkout@v4

‎.github/workflows/dependabot-build.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@ jobs:
3737
with:
3838
app_id: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_APP_ID }}
3939
private_key: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_PRIVATE_KEY }}
40+
repositories: "dependabot/fetch-metadata"
4041

4142
- uses: actions/checkout@v4
4243
with:

‎.github/workflows/release-bump-version.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ jobs:
2424
with:
2525
app_id: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_APP_ID }}
2626
private_key: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_PRIVATE_KEY }}
27+
repositories: "dependabot/fetch-metadata"
2728

2829
- uses: actions/checkout@v4
2930
with:

‎.github/workflows/release-move-tracking-tag.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@ jobs:
3434
with:
3535
app_id: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_APP_ID }}
3636
private_key: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_PRIVATE_KEY }}
37+
repositories: "dependabot/fetch-metadata"
3738

3839
- uses: actions/checkout@v4
3940
with:

0 commit comments

Comments
 (0)