Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[core] Harden GitHub Actions permissions #34769

Merged

Conversation

oliviertassinari
Copy link
Member

@oliviertassinari oliviertassinari commented Oct 15, 2022

See mui/mui-x#6396 for the problem it solves. It's part of https://securityscorecards.dev/ and our effort to sell to larger companies.

@oliviertassinari oliviertassinari added core Infrastructure work going on behind the scenes security Pull requests that address a security vulnerability labels Oct 15, 2022
@mui-bot
Copy link

mui-bot commented Oct 15, 2022

Messages
📖 Netlify deploy preview: https://deploy-preview-34769--material-ui.netlify.app/

No bundle size changes

Generated by 🚫 dangerJS against ea22851

@oliviertassinari oliviertassinari merged commit b9ab567 into mui:master Oct 19, 2022
@oliviertassinari oliviertassinari deleted the harden-github-actions-permission branch October 19, 2022 09:44
@oliviertassinari
Copy link
Member Author

oliviertassinari commented Oct 19, 2022

So far it seems to have worked without regressions on MUI X and MUI Toolpad, so hopefully, I didn't break anything 😁.

I will check https://deps.dev/npm/%40mui%2Fmaterial again in a couple of days.

Screenshot 2022-10-19 at 11 45 43

daniel-rabe pushed a commit to daniel-rabe/material-ui that referenced this pull request Nov 29, 2022
feliperli pushed a commit to jesrodri/material-ui that referenced this pull request Dec 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
core Infrastructure work going on behind the scenes security Pull requests that address a security vulnerability
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants