Actions: Add security-severity to excessive secrets exposure query

Same value as missing actions permissions,
both providing warnings to follow the
principle of least privilege within a
workflow.
This commit is contained in:
Aditya Sharad
2025-04-14 14:41:08 -07:00
parent 93fbb9fe61
commit 6eb060f16a

View File

@@ -3,6 +3,7 @@
* @description All organization and repository secrets are passed to the workflow runner.
* @kind problem
* @precision high
* @security-severity 5.0
* @problem.severity warning
* @id actions/excessive-secrets-exposure
* @tags actions