Lockdown CI Security

This GitHub action restricts the build from continuing to execution unless the author of the commit/pull request is among a list of approved users.

Example: Only repo owner can execute builds. Orgs and teams not supported yet.

- uses: InstaCode/lockdown@v1.1

Example: Repo Owner is assumed permitted with one additional user.

- uses: InstaCode/lockdown@v1.1
  with:
    users: dependabot-preview

Example: Repo Owner is held to strict rules and must be listed in

- uses: InstaCode/lockdown@v1.1
  with:
    users: fake-user, dependabot-preview
    strict: true

The users property accepts a comma delimited list of valid github usernames that will be trimmed during processing.

Name		Name	Last commit message	Last commit date
Latest commit History 190 Commits
.github		.github
dist		dist
src		src
.eslintignore		.eslintignore
.eslintrc.json		.eslintrc.json
.gitignore		.gitignore
.prettierignore		.prettierignore
.prettierrc.json		.prettierrc.json
.sonarcloud.properties		.sonarcloud.properties
LICENSE		LICENSE
README.md		README.md
action.yml		action.yml
jest.config.js		jest.config.js
package-lock.json		package-lock.json
package.json		package.json
sonar-project.properties		sonar-project.properties
tsconfig.json		tsconfig.json

InstaCode/lockdown