Apply security hardening to workflows #29

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

sserrata wants to merge 5 commits into main from codex/review-github-actions-for-security-risks

Owner

sserrata commented Jul 16, 2025

Summary

limit default token permissions for validation and perf builds
pin Node runtime for release workflows
check org membership correctly in PR previews

Testing

yarn lint
yarn test

https://chatgpt.com/codex/tasks/task_e_6875581856c08323b70786a132582877


          Improve org membership check

f7d43f8

sserrata added the codex label

— with

ChatGPT Codex Connector

sserrata added 4 commits

July 16, 2025 13:26


          Require approval for analyze_unsafe

74fc90a


          Use default env for non-member builds

be482e2


          Refine workflow permissions

cb0f897


          Restrict tokens and retain PR comments

74272d8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels