NEW TOOL TO SECURE YOUR GITHUB ACTIONS

Summary from the TLDR newsletter

action-permissions is a tool that monitors GitHub Actions workflows and recommends the minimum permissions required to run them.