Secure GitHub Webhooks with Secrets
tip
This check is currently under development and not yet implemented. Click here to learn how you can help.
Description
Ensure that Github Webhooks use secrets
Details
- Default Category: service authentication
- Default Priority Group: P3
- C-SCRM: true
- Mitre: CWE-306
- Sources: OpenSSF Scorecard
- Sources: OpenSSF SCM Best Practices
- How To: Github Docs