Skip to content

[BUG] Read-all and Write-all permissions should not be used in .github/workflows/sonarcloud.yaml. #5398

@JiGuoDing

Description

@JiGuoDing

What is your environment(Kubernetes version, Fluid version, etc.)

Describe the bug

Using permissions: read-all or permissions: write-all grants all read or write permissions to a job, violating the principle of least privilege. Jobs should only have the specific permissions they need.

What you expect to happen:

Replace "read-all" with specific permissions (e.g., "contents: read").

How to reproduce it

Attempt to run the test setup with unlimited read or write permissions for a job in the referenced file and observe if there are any unexpected behaviors or vulnerabilities.

Additional Information

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions