Commit 4cb65a2
authored
Delete .github/workflows/fix-latest.yml
During a routine security review today, I discovered that we have an `NPM_TOKEN` stored in this repo. I didn't think we used these as we had moved on to [OIDC trusted publishing](https://docs.npmjs.com/trusted-publishers/).
Turns out, there's this old workflow from #1002 which makes use of it. I don't really feel comfortable having tokens we're not using, used in actions we're not using, so by the power vested in me, I'm going to delete this action, merge the PR, and remove the GitHub secret.
cc @marji-workos1 parent f31d872 commit 4cb65a2
1 file changed
Lines changed: 0 additions & 36 deletions
This file was deleted.
0 commit comments