From a8cb892b4a4e46652f1943667f8a19107bcffc64 Mon Sep 17 00:00:00 2001 From: James Ives Date: Fri, 20 May 2022 12:48:22 -0400 Subject: [PATCH] Updated permission set in README --- README.md | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index b2f8434a..7fc656d3 100644 --- a/README.md +++ b/README.md @@ -59,6 +59,8 @@ You can view an example of this below. ```yml name: Build and Deploy on: [push] +permissions: + contents: write jobs: build-and-deploy: concurrency: ci-${{ github.ref }} # Recommended if you intend to make multiple deployments in quick succession. @@ -92,7 +94,12 @@ It's recommended that you use [Dependabot](https://docs.github.com/en/code-secur #### Security Settings ⚠️ -If you do not supply the action with an access token or an SSH key, you must access your repositories settings and provide `Read and Write Permissions` to the provided `GITHUB_TOKEN`, otherwise you'll potentailly run into permission issues. +If you do not supply the action with an access token or an SSH key, you must access your repositories settings and provide `Read and Write Permissions` to the provided `GITHUB_TOKEN`, otherwise you'll potentailly run into permission issues. Alternatively you can set the following in your workflow file to grant the action the permissions it needs. + +```yml +permissions: + contents: write +``` #### Install as a Node Module 📦 @@ -262,6 +269,8 @@ If you're using an operating system such as [Windows](https://www.microsoft.com/ ```yml name: Build and Deploy on: [push] +permissions: + contents: write jobs: build: runs-on: windows-latest # The first job utilizes windows-latest @@ -329,6 +338,8 @@ If you're using a custom domain and require a `CNAME` file, or if you require th ```yml name: Build and Deploy +permissions: + contents: write on: push: branches: