Skip to content

Scorecard: Token-Permissions (9/10) #9

Closed

Description

@don-petry

OpenSSF Scorecard Finding

Check: Token-Permissions
Score: 9 / 10
Finding: detected GitHub workflow tokens with excessive permissions

Remediation

https://github.com/ossf/scorecard/blob/80ee3ecfedf8b19ab8991713a9fdb2e7dcd7262e/docs/checks.md#token-permissions

Context

This issue was automatically created from an OpenSSF Scorecard scan on 2026-03-27.

Activity

  1. claude commented on Apr 5, 2026

    @claude

    Claude Code is working…

    I'll analyze this and get back to you.

    View job run

  2. don-petry commented on May 17, 2026

    @don-petry
    ContributorAuthor

    Resolved! Score is now 10/10 as of 2026-05-17. Finding: GitHub workflow tokens follow principle of least privilege

  3. added 2 commits that reference this issue on Aug 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    scorecardOpenSSF Scorecard finding

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions