Document update - permission section (#44)
Some checks failed
Basic validation / Basic validation (push) Failing after 0s
Check dist/ / Check dist/ (push) Failing after 0s
Licensed / Licensed (push) Failing after 0s
Update configuration files / Update configuration files (push) Failing after 1s
CodeQL analysis / CodeQL analysis (push) Failing after 1s

* Add permissions section

* Audit fix
This commit is contained in:
HarithaVattikuti 2025-01-16 08:47:36 -06:00 committed by GitHub
parent 0f919ea818
commit 2b67ec31c3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 13 additions and 3 deletions

View File

@ -20,6 +20,15 @@ Read more about action versioning notation in [action-versioning.md](https://git
To roll back a release in case of customer impact, start the workflow manually and specify the previous stable tag.
## Recommended permissions
When using the `publish-action` in your GitHub Actions workflow, it is recommended to set the following permissions to ensure proper functionality:
```yaml
permissions:
contents: write # access to publish release
```
## Conributions
We don't accept contributions until the action is ready for production.

7
package-lock.json generated
View File

@ -2533,10 +2533,11 @@
}
},
"node_modules/cross-spawn": {
"version": "7.0.3",
"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
"version": "7.0.6",
"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
"dev": true,
"license": "MIT",
"dependencies": {
"path-key": "^3.1.0",
"shebang-command": "^2.0.0",