{"repo":"pkgdeps/update-github-actions-permissions","free":true,"listed":false,"github":"https://github.com/pkgdeps/update-github-actions-permissions","clone":"git clone https://github.com/pkgdeps/update-github-actions-permissions.git","description":"A CLI that update GitHub Actions's `permissions` automatically","language":"TypeScript","stars":70,"topics":["github-actions","permissions","security","tool"],"license":null,"category":"security-tools","readme_excerpt":"@pkgdeps/update-github-actions-permissions Update GitHub Actions's permissions automatically. Before After :--------------------------------------------: :------------------------------------------: Features - Static Analytics - Detect using Actions and add permissions field to your action yaml file - Support 500+ GitHub Actions Install Install with npm: npm install @pkgdeps/update-github-actions-permissions --global or Install and Run via npx command: npx @pkgdeps/update-github-actions-permissions \".github/workflows/ .{yaml,yml}\" Usage Usage $ update-github-actions-permissions \"[file glob]\" Options --defaultPermissions [String] \"write-all\" or \"read-all\" or \"{}\". Default: \"write-all\" https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs --verbose [Boolean] If enable verbose, output debug info. --use-rule-definitions [String[]] Use rule definitions. Default: [\"default\", \"step-security\"] Examples $ update-github-actions-permissions \".github/workflows/test.yml\" # multiple inputs $ update-github-actions-permissions \".github/workflows/test.yml\" \".github/workflows/publish.yml\" $ update-github-actions-permissions \".github/workflows/ .{yml,yaml}\" Add New Actions This tool manage permissions in actions.yml. If you want to improve the permissions definitions, please edit actions.yml. 1. Edit actions.yml 2. Submit a Pull Request 📝 This tool includes step-security/secure-repo definitions. If same action is defined in both, this tool prefer to use actions.yml. T","default_branch":null,"files":null,"tree":[],"storefront":"/r/pkgdeps","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/pkgdeps/update-github-actions-permissions/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}