Skip to content

Commit

Permalink
Revert "build: Remove redundant confusing Mega Linter permissions"
Browse files Browse the repository at this point in the history
This reverts commit 4209614.
  • Loading branch information
vorburger committed Nov 2, 2023
1 parent e8ab04f commit 3f733d5
Showing 1 changed file with 8 additions and 4 deletions.
12 changes: 8 additions & 4 deletions .github/workflows/mega-linter.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,11 +36,8 @@ concurrency:
group: ${{ github.ref }}-${{ github.workflow }}
cancel-in-progress: true

# https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
# NB: The "Maximum access for pull requests from public forked repositories" is still only read, even though we ask for write here;
# this only applies to branches on the repo itself. This makes sense security wise (committers who you can push to branches, are implictily already "trusted" anyway, as they could merge PRs).
permissions:
contents: write
contents: read
pull-requests: write
issues: write

Expand All @@ -49,6 +46,13 @@ jobs:
name: MegaLinter
runs-on: ubuntu-latest

# Give the default GITHUB_TOKEN write permission to commit and push, comment
# issues, and post new Pull Requests; remove the ones you do not need
permissions:
contents: write
issues: write
pull-requests: write

steps:
# Git Checkout
- name: Harden Runner
Expand Down

0 comments on commit 3f733d5

Please sign in to comment.