Applying the principle of least privilege is a security best practice. We've published a set of GitHub Actions that allow you to monitor and enumerate the set of privileges that are required by a given GitHub workflow. See it in action. https://github.blog/2023-06-26-new-tool-to-secure-your-github-actions/ https://t.co/KbSwwWC71G

https://twitter.com/github/status/1673378433559150615