Repository navigation
Commit 0c5ee14
committed
Stop passing the CI App key to the shared design gate
The shared gate now runs every write on the job's GITHUB_TOKEN, which
pull_request_target grants the declared write permissions even for fork
PRs. The org CI App key can read every private repository, so public
repositories should not hand it to any workflow.1 parent c1a9998 commit 0c5ee14
1 file changed
Lines changed: 0 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
19 | | - | |
0 commit comments