Progress Tracker

Github workflows

• zizmor.yml
• add-good-first-issue-labels.yml
• automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml
• automerge-for-humans-merging.yml
• automerge-for-humans-remove-ready-to-merge-label-on-edit.yml
• automerge-orphans.yml
• automerge.yml
• autoupdate.yml
• bounty-program-commands.yml
• bump.yml
• global-remover.yml
• global-replicator.yml
• help-command.yml
• if-docker-pr-testing.yml
• if-go-pr-testing.yml
• if-nodejs-pr-testing.yml
• if-nodejs-release.yml
• if-nodejs-version-bump.yml GITHUB_TOKEN used instead of GH_TOKEN and permissions added to the workflow and the job. Test PR and Test Workflow Run.
• issues-prs-notifications.yml No permissions needed since the workflow only reads context data. Pull request target not a big problem but can have spam notifications or phishing links.
• lint-pr-title.yml - Using GITHUB_TOKEN instead of GH_TOKEN and added permissions to the workflow and the job. Test PR and Test Workflow Run
• notify-tsc-members-mention.yml - pull_request_target not a big issue for this one. Mailchimp script needs to be tightened though.
• please-take-a-look-command.yml - permissions added to the workflow. Test PR and Test Workflow Run
• release-announcements.yml Just added content read permissions and removed checkout persist credentials.
• stale-issues-prs.yml - Permissions added to the workflow and the job. Test Issue and Test Workflow Run
• transfer-issue.yml Removed that as it was not working right now.
• update-docs-on-docs-commits.yml - Just added content read permissions since the workflow uses GH_TOKEN and removed checkout persist credentials.
• update-maintainers-trigger.yaml Didn't do too much, just added content read permissions since the workflow uses GH_TOKEN.
• update-pr.yml - Test PR
• validate-workflow-schema.yml
• welcome-first-time-contrib.yml - permissions tightened and GH_TOKEN -> GITHUB_TOKEN so that pull_request_target is no longer required. Test Issue

Scripts

• Mailchimp scripts
  • htmlContent.js
  • index.js
  • package.json
  • package-lock.json

Actions

• get-node-version-from-package-lock
  • action.yml
  • README.md
• slackify-markdown
  • action.yml

Add actions-permission monitoring to the issues.

Still need to verify

• issues-prs-notifications.yml

Related issue(s)
Fixes #388 ](ci: github workflow linter and security validator)](ci: github workflow linter and security validator)](ci: github workflow linter and security validator)