Commit b4cb479
committed
fix: pass only required secrets to build-instrumented workflow
Replace 'secrets: inherit' with explicit GITHUB_TOKEN secret to follow
security best practices. The build-instrumented-plugins.yaml workflow
only requires GITHUB_TOKEN for GHCR authentication.
Fixes GitHub security alert: githubactions:S76351 parent cf4cae9 commit b4cb479
1 file changed
Lines changed: 2 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
249 | 249 | | |
250 | 250 | | |
251 | 251 | | |
252 | | - | |
| 252 | + | |
| 253 | + | |
253 | 254 | | |
254 | 255 | | |
255 | 256 | | |
| |||
0 commit comments