step-security/secure-repo

[KB] Add GitHub token permissions for technote-space/broken-link-checker-action Action

Closed this issue · 1 comments

step-security-bot commented

Knowledge Base is missing for technote-space/broken-link-checker-action.

step-security-bot commented

Analysis

Action Name: technote-space/broken-link-checker-action
Action Type: Node
GITHUB_TOKEN Matches: GITHUB_TOKEN,token,TOKEN
Top language: TypeScript
Stars: 17
Private: false
Forks: 6

Endpoints Found

Endpoint Permission
issues.create write
issues.get read

FollowUp Links.

https://github.com/technote-space/broken-link-checker-action/blob/186a34ca47cdf80fe8db1890241dbb6a5941f018/src/process.test.ts

action-security.yml

name: Broken Link Checker Action
github-token:
  action-input:
    input: GITHUB_TOKEN
    is-default: true
  permissions:
    issues: write