You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Near the top of the file immediately before the line jobs: insert:
permissions:
contents: read
issues: write
Trigger the workflow to confirm whether it runs with no further changes.
If there are errors:
Check which step of the workflow failed occurred and the reason for the failure in the workflow logs.
Research which permissions the API action requires. Many of the actions need issues: write, so you can change issues: read to issues: write on the line above and rerun.
Continue adding permissions back to the workflow until there are no errors.
Note that any workflow steps that include a personal access token (i.e. HACKFORLA_BOT_PA_TOKEN, etc.) do not need any changes.
Overview
We need to change the permissions for the default
GITHUB_TOKENfrom read/write to read only per GitHub's recommendation for security best practice.Action Items
Open file issue-trigger.yml.
jobs:insert:If there are errors:
issues: write, so you can changeissues: readtoissues: writeon the line above and rerun.Note that any workflow steps that include a personal access token (i.e.
HACKFORLA_BOT_PA_TOKEN, etc.) do not need any changes.Resources/Instructions