[llvm] workflows/new-issues: Limit token to current repository (PR #228692)
Tom Stellard via llvm-commits
llvm-commits at lists.llvm.org
Sat Oct 3 03:44:47 PDT 2026
https://github.com/tstellar created https://github.com/llvm/llvm-project/pull/228692
The token had access to all llvm repositories which was unnecessary since it was only used for llvm-project.
https://github.com/llvm/llvm-project/security/code-scanning/1862
>From 983c9c4e387b40aad01701c6801b8ea7248c1f5f Mon Sep 17 00:00:00 2001
From: Tom Stellard <tstellar at redhat.com>
Date: Wed, 19 Aug 2026 21:15:14 -0700
Subject: [PATCH] workflows/new-issues: Limit token to current repository
The token had access to all llvm repositories which was unnecessary
since it was only used for llvm-project.
https://github.com/llvm/llvm-project/security/code-scanning/1862
---
.github/workflows/new-issues.yml | 1 +
1 file changed, 1 insertion(+)
diff --git a/.github/workflows/new-issues.yml b/.github/workflows/new-issues.yml
index e3960c03e8959d..9f7c6e74271a7a 100644
--- a/.github/workflows/new-issues.yml
+++ b/.github/workflows/new-issues.yml
@@ -22,6 +22,7 @@ jobs:
client-id: ${{ secrets.LLVM_TOKEN_GENERATOR_CLIENT_ID }}
private-key: ${{ secrets.LLVM_TOKEN_GENERATOR_PRIVATE_KEY }}
owner: ${{ github.repository_owner }}
+ repositories: ${{ github.repository }}
permission-contents: read
permission-issues: write
- uses: llvm/actions/issue-labeler at 89a8cf80982d830faab019237860b344a6390c30 # main
More information about the llvm-commits
mailing list