Ensure the GitHub action is restricted

Risk Level: medium
Platform: Github
Spectral Rule ID: GH-HRD013

REMEDIATION

1. Change the GitHub action restrictions from all.
2. Enable the GitHub action permissions.
3. Add restrictions to Github action settings.

SaaS:

In the repository setting in the Github site:

1. Go to 'Actions'.
2. Go to 'Workflow permissions'.
3. Click on 'Read repository contents premission'.

Or,

1. Go to 'Actions'.
2. Go to 'Workflow permissions'.
3. Go to 'General actions permissions'.
4. Go to 'Policies'.
5. In the list, choose 'All repositories'.

Read more:

• https://docs.github.com/en/rest/actions/permissions#about-the-permissions-api