From 77c264bcc3784c366b773c616a061f2b8a007220 Mon Sep 17 00:00:00 2001 From: Ben Limmer Date: Thu, 17 Aug 2023 10:58:37 -0600 Subject: [PATCH 1/2] docs: add content read permission throughout --- command/README.md | 1 + preview-comment/README.md | 2 ++ preview/README.md | 1 + 3 files changed, 4 insertions(+) diff --git a/command/README.md b/command/README.md index 82eadd57..8d0a814c 100644 --- a/command/README.md +++ b/command/README.md @@ -66,6 +66,7 @@ jobs: if: ${{ github.event.issue.pull_request }} # Allow the bot to comment on pulls permissions: + contents: read pull-requests: write steps: - name: 🏗 Setup repo diff --git a/preview-comment/README.md b/preview-comment/README.md index f141b1af..9e7251cb 100644 --- a/preview-comment/README.md +++ b/preview-comment/README.md @@ -96,6 +96,7 @@ jobs: preview: runs-on: ubuntu-latest permissions: + contents: read pull-requests: write # Allow comments on PRs steps: - name: 🏗 Setup repo @@ -141,6 +142,7 @@ jobs: build: runs-on: ubuntu-latest permissions: + contents: read pull-requests: write # Allow comments on PRs steps: - name: 🏗 Setup repo diff --git a/preview/README.md b/preview/README.md index f00f219b..905095f1 100644 --- a/preview/README.md +++ b/preview/README.md @@ -130,6 +130,7 @@ jobs: preview: runs-on: ubuntu-latest permissions: + contents: read pull-requests: write # Allow comments on PRs steps: - name: 🏗 Setup repo From 446df95a2deb2e36f1202a048a645e25b8177259 Mon Sep 17 00:00:00 2001 From: Ben Limmer Date: Thu, 24 Aug 2023 16:41:30 -0600 Subject: [PATCH 2/2] docs: also add PR write permissions to root README --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 5b70c582..c2805f00 100644 --- a/README.md +++ b/README.md @@ -152,6 +152,9 @@ on: [pull_request] jobs: preview: runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write # Allow comments on PRs steps: - name: 🏗 Setup repo uses: actions/checkout@v3