Security
Least Privilege
Least privilege grants an identity only the access required for its task and only for the necessary duration. Applying it to CI limits what compromised scripts, dependencies, or actions can do with available credentials.
Why it matters
Narrow access reduces the damage a compromised workflow component can cause.
Practical example
Give test jobs read-only repository access and grant publishing rights only to the release job.
Related terms
Sources
Definition reviewed .
Start with $10 in free credits
Change the runner label in your workflow and keep the rest of your GitHub Actions setup. Runner time is billed per minute.