pipecd icon indicating copy to clipboard operation
pipecd copied to clipboard

docs: describe required Token Permissions for pipe-cd/actions-gh-release

Open abacchilb opened this issue 1 year ago • 1 comments

What would you like to be added:

In the https://github.com/pipe-cd/actions-gh-release/blob/main/README.md - document what permissions the GITHUB_TOKEN needs.

Why is this needed:

Github has updated their default token posture to only allow the token to read and not write. So now you need to set permissions above that in each job. It will be helpful to explicitly tell users what permissions are needed. ex:

permissions:
  contents: read
  issues: write
  pull-requests: write
  statuses: read
  checks: read

abacchilb avatar May 14 '24 21:05 abacchilb

Hi @abacchilb, sorry for the late response 🙏 . Would you like to submit a PR for docs fix 😄

khanhtc1202 avatar Oct 04 '24 08:10 khanhtc1202

@khanhtc1202 can I take this up and add a PR for this, I have read the readme and github's token policy. 😄

abhinavs1920 avatar May 11 '25 19:05 abhinavs1920

@abhinavs1920 Hey, I assigned you. Thank you!

t-kikuc avatar May 13 '25 10:05 t-kikuc

@t-kikuc @khanhtc1202 Please check the PR I have created which will resolve the issue.

Thankss!!

abhinavs1920 avatar May 13 '25 12:05 abhinavs1920