chainguard-dev / bincapz

detect malicious program behaviors
Apache License 2.0
378 stars 24 forks source link

Add pull-requests: write to version bump Workflow #262

Closed egibs closed 3 weeks ago

egibs commented 3 weeks ago

Hopefully the last Workflow tweak needed -- creating PRs is under different scope than other repository contents.

Reference: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

contents: write will be valid for creating releases so that Workflow should be okay.