robojerk/codeql-action

Remove --external-repository-token option from runner

Browse source 
Specifying a token as a cli input leads to a potential for leaking the
token on CI logs. This commit removes the option. Instead, users
should specify a single GitHub token through `--github-auth-stdin` or
by setting the `GITHUB_TOKEN` environment variable. This token should be
created with enough privileges to access the required repository.
This commit is contained in:
Andrew Eisenberg 2021-02-16 11:20:28 -08:00
parent 88714e3a60
commit 58defc0652
4 changed files with 2 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/api-client.ts
View file

@ -20,7 +20,7 @@ export interface GitHubApiDetails {
}
export interface GitHubApiExternalRepoDetails {
externalRepoAuth: string | undefined;
externalRepoAuth?: string;
url: string;
}