harden release workflow security (#209) #148
nightly.yml
on: push
nightly
/
...
/
delete
nightly
/
release
Annotations
1 error
|
Invalid workflow file:
.github/workflows/nightly.yml#L41
The workflow is not valid. Checkmarx/ast-cli-javascript-wrapper-runtime-cli/.github/workflows/release.yml@main (Line: 41, Col: 3): Error calling workflow 'Checkmarx/ast-cli-javascript-wrapper-runtime-cli/.github/workflows/delete-packages-and-releases.yml@main'. The workflow is requesting 'id-token: write', but is only allowed 'id-token: none'.
|