-
Notifications
You must be signed in to change notification settings - Fork 143
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Akto Integration #1815
Akto Integration #1815
Conversation
|
uses: razorpay/security-action/akto@master | ||
with: | ||
check_name: 'Api Build' | ||
git_token: ${{ secrets.GIT_TOKEN }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Service account GIT_TOKENs have long served as a dependable means of accessing our GitHub repositories. However, their long-term nature, without any expiration, has raised concerns about potential security risks. In contrast, GitHub App Tokens offer an enhanced, more secure, and flexible approach to managing access, benefiting both our team and our users. GitHub app tokens not only grant fine-grained control over permissions but also provide an added layer of security by being intentionally short-lived, minimizing the exposure window for potential security threats. Docs - https://docs.google.com/document/d/1oS0_8LPfdy07PSsCiyHOx2ZPlwwNZ_sJs8y53sbJzRg/edit#heading=h.2pkjwb2hp2ck Slack Thread - https://razorpay.slack.com/archives/C3UAR8DQE/p1698234208754839
⚪️ This finding does not block your pull request.
Ignore this finding from git-token-usage.
This pull request is automatically built and testable in CodeSandbox. To see build info of the built libraries, click here or the icon next to each commit SHA. Latest deployment of this branch, based on commit 54e26fd:
|
BundleMonUnchanged files (14)
Total files change +1B 0% Final result: ✅ View report in BundleMon website ➡️ |
Since there's no activity for a long time closing this. Pleas re-open when required |
No description provided.