Skip to content

Github Actions Security Hardening#3

Merged
muhammad-st merged 1 commit intomasterfrom
ms-ga-security-hardening
Feb 11, 2026
Merged

Github Actions Security Hardening#3
muhammad-st merged 1 commit intomasterfrom
ms-ga-security-hardening

Conversation

@muhammad-st
Copy link
Collaborator

@muhammad-st muhammad-st commented Feb 3, 2026

Overview

This pull request updates the GitHub Actions workflow configuration to improve security, reliability, and maintainability for Ruby tests. The most important changes are grouped below:

Security improvements:

  • Restricted default workflow permissions to contents: read to minimize potential security risks.
  • Disabled credential persistence on the checkout step to prevent accidental leaking of credentials.

Workflow reliability:

  • Added a concurrency group to prevent duplicate workflow runs and automatically cancel in-progress runs for the same branch or pull request.

Maintenance:

  • Updated the actions/checkout step from version 3 to version 4 for improved performance and support.
  • Added a descriptive job name Ruby Tests for clarity in workflow runs.

Related tickets

Stakeholders

@muhammad-st muhammad-st merged commit 2c95f3e into master Feb 11, 2026
3 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants