diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index c80a484..b8c60c1 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -1,4 +1,6 @@ name: Security audit +permissions: + contents: read on: schedule: - cron: '0 0 * * 0' @@ -13,6 +15,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 + with: + persist-credentials: false - uses: actions-rs/audit-check@v1 with: token: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5387b13..e5fb599 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -5,6 +5,8 @@ on: pull_request: name: CI +permissions: + contents: read jobs: clippy: @@ -18,6 +20,8 @@ jobs: - 1.46.0 steps: - uses: actions/checkout@v2 + with: + persist-credentials: false - uses: actions-rs/toolchain@v1 with: profile: minimal @@ -33,6 +37,9 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 + with: + persist-credentials: false + - uses: actions-rs/toolchain@v1 with: profile: minimal @@ -46,6 +53,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 + with: + persist-credentials: false - uses: actions-rs/toolchain@v1 with: profile: minimal diff --git a/CHANGELOG.md b/CHANGELOG.md index 53cc50b..5707656 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,5 +8,5 @@ Notable changes to this project will be documented in the [keep a changelog](htt Inital release -[Unreleased]: https://github.com/1Password/password-rules-parser/compare/v0.1.0...HEAD +[Unreleased]: https://github.com/1Password/electron-hardener/compare/v0.1.0...HEAD [0.1.0]: https://github.com/1Password/electron-hardener/releases/tag/v0.1.0 \ No newline at end of file diff --git a/README.md b/README.md index 53da064..5a11b73 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ address space, it should not be able to change what an app does at runtime. The library provides two sets of functionality: - An interface to view and modify the status of fuses in an application, similar to the [official fuses package](https://github.com/electron/fuses). - - A fast and configurable alternative implementation of the [electron-evil-feature-patcher](https://github.com/antelle/electron-evil-feature-patcher) tool created by [Dimitri Witkowski](). + - A fast and configurable alternative implementation of the [electron-evil-feature-patcher](https://github.com/antelle/electron-evil-feature-patcher) tool created by [Dimitri Witkowski]. All patches it can perform are also exposed in this crate. See its README for more details on how it works. ## Usage