Commit e85ed07
committed
Update reference link re: GITHUB_TOKEN permissions for workflow runs triggered by events from forks
The personal access token used by the action to make the report comment must have write permissions. The action uses the
automatically generated `GITHUB_TOKEN` token by default.
When the action is used in a public repository, it is essential for the maintainer of the repository to understand how
the permissions of that token work. For security reasons, the permissions of the token are downgraded to write when used
in a workflow run triggered by an event that comes from a fork. This is the reason why another approach must be used to
run the action's workflow in public repositories.
The action documentation provides an explanation of this, but relies on the GitHub Actions documentation to explain the
details of the token permissions downgrade system. Due to changes in the GitHub documentation, the linked page no longer
contains that information. The link is hereby updated to point to the information in its new location in the GitHub
Actions docs.1 parent e4d2815 commit e85ed07
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
45 | 45 | | |
46 | 46 | | |
47 | 47 | | |
48 | | - | |
| 48 | + | |
49 | 49 | | |
50 | 50 | | |
51 | 51 | | |
| |||
0 commit comments