Commit e74fb5d
🩹 [Patch]: Replace secrets inheritance with explicit secret passing (#137)
Improves workflow security by replacing unconditional `secrets: inherit`
with explicit secret passing in the Process-PSModule workflow. This
follows the principle of least privilege by only passing the required
`APIKey` secret instead of exposing all repository secrets to the
reusable workflow.
- Fixes #136
## Changes
1. **Updated `.github/workflows/Process-PSModule.yml`**: Changed from
`secrets: inherit` to explicitly passing only the required `APIKey`
secret using `APIKey: ${{ secrets.APIKey }}`.
## Benefits
- Reduces risk of unintended secret exposure to reusable workflows
- Follows GitHub Actions security best practices
- Addresses zizmor security linting warnings
- No functional changes - the workflow continues to operate identically
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>1 parent 208c533 commit e74fb5d
1 file changed
Lines changed: 2 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
| 32 | + | |
0 commit comments