Closed Gold856 closed 3 months ago
The docs say that GITHUB_TOKEN will be given write permissions when using pull_request_target. Using pull_request means the permissions will be read-only.
GITHUB_TOKEN
pull_request_target
pull_request
This removes the GitHub-token? Is one provided by default?
Yes, one is provided by default.
Yeah, actions within @actions have special privilege to receive github.token as a default.
The docs say that
GITHUB_TOKEN
will be given write permissions when usingpull_request_target
. Usingpull_request
means the permissions will be read-only.