actions / stale

Marks issues and pull requests that have not had recent interaction

MIT License

1.34k stars 353 forks source link

`actions: write` is too permissive #1159

Open RedYetiDev opened 3 months ago

RedYetiDev commented 3 months ago

References

1133 / #1131

https://github.com/nodejs/help/pull/4396

Issue

Currently, the stale bot (and the runner in general) require actions: write permissions to modify existing caches but not to create new ones. If actions: write permissions aren't necessary to create caches, why are they needed to update them? Could a new cache: write permission be introduced for the runner?

HarithaVattikuti commented 3 months ago

Hello @RedYetiDev Thank you for creating this issue. We will investigate it and get back to you as soon as we have some feedback.