Skip to content

Commit 4cb65a2

Browse files
authored
Delete .github/workflows/fix-latest.yml
During a routine security review today, I discovered that we have an `NPM_TOKEN` stored in this repo. I didn't think we used these as we had moved on to [OIDC trusted publishing](https://docs.npmjs.com/trusted-publishers/). Turns out, there's this old workflow from #1002 which makes use of it. I don't really feel comfortable having tokens we're not using, used in actions we're not using, so by the power vested in me, I'm going to delete this action, merge the PR, and remove the GitHub secret. cc @marji-workos
1 parent f31d872 commit 4cb65a2

1 file changed

Lines changed: 0 additions & 36 deletions

File tree

.github/workflows/fix-latest.yml

Lines changed: 0 additions & 36 deletions
This file was deleted.

0 commit comments

Comments
 (0)