auto-check-element

auto-check-element copied to clipboard

Should `csrf` be a required attribute?

1

Right now, we exit early if there is no `CSRF` token. Maybe we should allow users to supply a CSRF token and not mandate it optionally? https://github.com/github/auto-check-element/blob/23108987c32ee07f654e49a1cb727660fed9f2da/src/index.ts#L102-L105

koddsson

Potential fixes for 2 code scanning alerts from the [Copilot AutoFix: Missing Permissions in Workflows](https://github.com/orgs/github/security/campaigns/20) security campaign: - https://github.com/github/auto-check-element/security/code-scanning/2 To fix the problem, you should add a `permissions:` block with...

cinderellasecure

It's not included in the `file` property of package.json. Also, it's confusing that the npm version is 6.0.0, but the version here is 5.2.0

justinfagnani