[llvm] workflows/new-issues: Limit token to current repository (PR #228692)

Tom Stellard via llvm-commits llvm-commits at lists.llvm.org
Sat Oct 3 03:44:47 PDT 2026


https://github.com/tstellar created https://github.com/llvm/llvm-project/pull/228692

The token had access to all llvm repositories which was unnecessary since it was only used for llvm-project.

https://github.com/llvm/llvm-project/security/code-scanning/1862

>From 983c9c4e387b40aad01701c6801b8ea7248c1f5f Mon Sep 17 00:00:00 2001
From: Tom Stellard <tstellar at redhat.com>
Date: Wed, 19 Aug 2026 21:15:14 -0700
Subject: [PATCH] workflows/new-issues: Limit token to current repository

The token had access to all llvm repositories which was unnecessary
since it was only used for llvm-project.

https://github.com/llvm/llvm-project/security/code-scanning/1862
---
 .github/workflows/new-issues.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/new-issues.yml b/.github/workflows/new-issues.yml
index e3960c03e8959d..9f7c6e74271a7a 100644
--- a/.github/workflows/new-issues.yml
+++ b/.github/workflows/new-issues.yml
@@ -22,6 +22,7 @@ jobs:
           client-id: ${{ secrets.LLVM_TOKEN_GENERATOR_CLIENT_ID }}
           private-key: ${{ secrets.LLVM_TOKEN_GENERATOR_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
+          repositories: ${{ github.repository }}
           permission-contents: read
           permission-issues: write
       - uses: llvm/actions/issue-labeler at 89a8cf80982d830faab019237860b344a6390c30 # main



More information about the llvm-commits mailing list