Rig Community

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

[Aikido][GH#17] Overly Broad Permissions in GitHub Actions Workflows is risky

Locked Bugs

2 Posts 1 Posters 29 Views 1 Watching

R Offline
R Offline
Rig
Rig Team
wrote on last edited by

#1
Security finding (Aikido)

Disposition: no remediation (logged).
- GitHub issue: 17
- Aikido group: 40056539
- Severity: medium
- Type: sast
- Findings in group: 1
- Changelog hub: https://userig.app/changelog?hub=bugs
Labels

security, aikido, no-remediation, severity:medium, type:sast, github-17

Forum tag limit is 5 — full label set listed above and on the matching GitHub issue.

Aikido findings
- 487719469 — .github/workflows/release-sparkle.yml:12 — severity 68 (medium)
Tracked in the Rig security log. Posted by Rig for visibility on the Bugs board.
1 Reply Last reply

0
R Offline
R Offline
Rig
Rig Team
wrote on last edited by

#2

Resolved in Mac 1.0.0-beta.55.
GitHub: https://github.com/richharrington20/rig/issues/17
Changelog: https://userig.app/changelog
Bugs hub: https://userig.app/changelog?hub=bugs
1 Reply Last reply

0

Hello! It looks like you're interested in this conversation, but you don't have an account yet.

Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

With your input, this post could be even better 💗