Skip to content

Conversation

DilumAluthge
Copy link
Member

According to the GitHub documentation (https://docs.github.com/en/actions/reference/authentication-in-a-workflow#modifying-the-permissions-for-the-github_token):

You can use the permissions key in your workflow file to modify permissions for the GITHUB_TOKEN for an entire workflow or for individual jobs. This allows you to configure the minimum required permissions for a workflow or job. When the permissions key is used, all unspecified permissions are set to no access, with the exception of the metadata scope, which always gets read access.

Therefore, if we just set statuses: write, all of the other permissions will automatically be set to no access.

@DilumAluthge DilumAluthge added ci Continuous integration backport 1.6 Change should be backported to release-1.6 backport 1.7 labels Aug 10, 2021
@DilumAluthge DilumAluthge merged commit 34dc044 into master Aug 10, 2021
@DilumAluthge DilumAluthge deleted the dpa/token branch August 10, 2021 17:33
@KristofferC KristofferC mentioned this pull request Aug 11, 2021
75 tasks
KristofferC pushed a commit that referenced this pull request Aug 25, 2021
…le for the "Statuses" workflow (#41851)

(cherry picked from commit 34dc044)
KristofferC pushed a commit that referenced this pull request Aug 25, 2021
…le for the "Statuses" workflow (#41851)

(cherry picked from commit 34dc044)
KristofferC pushed a commit that referenced this pull request Aug 31, 2021
…le for the "Statuses" workflow (#41851)

(cherry picked from commit 34dc044)
KristofferC pushed a commit that referenced this pull request Sep 3, 2021
…le for the "Statuses" workflow (#41851)

(cherry picked from commit 34dc044)
@KristofferC KristofferC removed backport 1.6 Change should be backported to release-1.6 backport 1.7 labels Sep 7, 2021
staticfloat pushed a commit that referenced this pull request Dec 23, 2022
…le for the "Statuses" workflow (#41851)

(cherry picked from commit 34dc044)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ci Continuous integration
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants