Skip to content

Commit e74fb5d

Browse files
🩹 [Patch]: Replace secrets inheritance with explicit secret passing (#137)
Improves workflow security by replacing unconditional `secrets: inherit` with explicit secret passing in the Process-PSModule workflow. This follows the principle of least privilege by only passing the required `APIKey` secret instead of exposing all repository secrets to the reusable workflow. - Fixes #136 ## Changes 1. **Updated `.github/workflows/Process-PSModule.yml`**: Changed from `secrets: inherit` to explicitly passing only the required `APIKey` secret using `APIKey: ${{ secrets.APIKey }}`. ## Benefits - Reduces risk of unintended secret exposure to reusable workflows - Follows GitHub Actions security best practices - Addresses zizmor security linting warnings - No functional changes - the workflow continues to operate identically --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
1 parent 208c533 commit e74fb5d

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

‎.github/workflows/Process-PSModule.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,4 +28,5 @@ permissions:
2828
jobs:
2929
Process-PSModule:
3030
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@be7d5dcbceec14855d325fdd34f2a7c2f05a7f57 # v5.4.1
31-
secrets: inherit
31+
secrets:
32+
APIKey: ${{ secrets.APIKey }}

0 commit comments

Comments
 (0)