Add NEXT_GITHUB_READ_API_TOKEN to PERMISSIONS.md

MattIPv4 · MattIPv4 · commit b3ba9ea71b2c · 2026-04-12T23:43:32.000+01:00
diff --git a/PERMISSIONS.md b/PERMISSIONS.md
@@ -32,11 +32,12 @@
 
 ## Access Tokens & Automations
 
-| Secret Name                | Display Name            | Platform(s) / Location(s)                                              | Associated Project(s)                     | Access Level | Expiry | Notes                                       |
-| -------------------------- | ----------------------- | ---------------------------------------------------------------------- | ----------------------------------------- | ------------ | ------ | ------------------------------------------- |
-| `CF_API_TOKEN`             | N/A                     | [nodejs/discord-status-worker][], [nodejs/release-cloudflare-worker][] | [Cloudflare][]                            | Write        | -      | Used for deploying to Cloudflare Workers    |
-| `CROWDIN_GITHUB_BOT_TOKEN` | **[@nodejs-crowdin][]** | [nodejs/nodejs.org][]                                                  | [nodejs/nodejs.org][]                     | Write        | -      | Used for localization workflows via Crowdin |
-| N/A                        | **[@openjs-vercel][]**  | Vercel                                                                 | [nodejs/nodejs.org][], [nodejs/doc-kit][] | Admin        | -      | Used for deployments                        |
+| Secret Name                  | Display Name            | Platform(s) / Location(s)                                              | Associated Project(s)                     | Access Level | Expiry | Notes                                       |
+| ---------------------------- | ----------------------- | ---------------------------------------------------------------------- | ----------------------------------------- | ------------ | ------ | ------------------------------------------- |
+| `CF_API_TOKEN`               | N/A                     | [nodejs/discord-status-worker][], [nodejs/release-cloudflare-worker][] | [Cloudflare][]                            | Write        | -      | Used for deploying to Cloudflare Workers    |
+| `CROWDIN_GITHUB_BOT_TOKEN`   | **[@nodejs-crowdin][]** | [nodejs/nodejs.org][]                                                  | [nodejs/nodejs.org][]                     | Write        | -      | Used for localization workflows via Crowdin |
+| N/A                          | **[@openjs-vercel][]**  | Vercel                                                                 | [nodejs/nodejs.org][], [nodejs/doc-kit][] | Admin        | -      | Used for deployments                        |
+| `NEXT_GITHUB_READ_API_TOKEN` | **[@openjs-vercel][]**  | Vercel (Production-only)                                               | [nodejs/nodejs.org][]                     | `read:org`   | -      | Used for fetching GitHub sponsors           |
 | `CLOUDFLARE_API_TOKEN`     | N/A                     | [nodejs/nodejs.org][]                                                  | [Cloudflare][]                            | Write        | -      | Used for deploying Cloudflare Workers       |
 
 [1Password]: https://1password.com/
