Skip to content

Scorecard: Token-Permissions (7/10) #318

Description

@don-petry

OpenSSF Scorecard Finding

Check: Token-Permissions
Score: 7 / 10
Finding: detected GitHub workflow tokens with excessive permissions

Remediation

https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions

Context

This issue was automatically created from an OpenSSF Scorecard scan on 2026-05-17.

Activity

  1. don-petry commented on May 17, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  2. don-petry commented on May 17, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  3. don-petry commented on May 17, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  4. don-petry commented on May 18, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  5. don-petry commented on May 25, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  6. don-petry commented on Jun 1, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  7. don-petry commented on Jun 8, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 7/10. Finding: detected GitHub workflow tokens with excessive permissions

  8. don-petry commented on Jun 15, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 6/10. Finding: detected GitHub workflow tokens with excessive permissions

  9. don-petry commented on Jun 22, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 5/10. Finding: detected GitHub workflow tokens with excessive permissions

  10. don-petry commented on Jun 29, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 5/10. Finding: detected GitHub workflow tokens with excessive permissions

  11. don-petry commented on Jul 6, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 5/10. Finding: detected GitHub workflow tokens with excessive permissions

  12. don-petry commented on Jul 13, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 5/10. Finding: detected GitHub workflow tokens with excessive permissions

  13. don-petry commented on Jul 14, 2026

    @don-petry
    ContributorAuthor

    Weekly update: Score is now 5/10. Finding: detected GitHub workflow tokens with excessive permissions

  14. don-petry commented on Jul 20, 2026

    @don-petry
    ContributorAuthor

    Resolved! Score is now 10/10 as of 2026-07-20. Finding: GitHub workflow tokens follow principle of least privilege

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    scorecardOpenSSF Scorecard findings

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions