Skip to content

Commit

Permalink
Grammar and formatting fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
ababushk committed Nov 13, 2024
1 parent 6b0b3a0 commit 5ba865c
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/dev/ci/github_actions/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ There are a few simple steps that we should follow to ensure our workflows are n

## Adjust `GITHUB_TOKEN` permissions

Use the permissions key to make sure the GITHUB_TOKEN is configured with the least privileges for each job.
Use the `permissions` key to make sure the `GITHUB_TOKEN` is configured with the least privileges for each job.

Start with relatively safe permissions:

Expand Down Expand Up @@ -69,11 +69,11 @@ jobs:

## Handle secrets correctly

**Never ever** use plain-text secrets hard-coded in GitHub Actions Workflow. If you need to use secrets, contact a member of OpenVINO GitHub Actions task force first.
**Never ever** use plain-text secrets hard-coded in GitHub Actions Workflow. If you need to use secrets, contact a member of the OpenVINO GitHub Actions task force first.

## Be careful with user input.

Most of GitHub context variables propagated from user input. That means they should be treated as an untrusted and potentially malitious. There are some tactics you can use to mitigate the risk:
Most of GitHub context variables propagated from user input. That means they should be treated as an untrusted and potentially malicious. There are some tactics you can use to mitigate the risk:
- Instead of using inline scripts, create an action and pass the variable as an argument
- Put the value into an environment variable for the step, and use the variable in the script

Expand Down

0 comments on commit 5ba865c

Please sign in to comment.