fix: add explicit permissions to CLA workflow, drop PAT (#121)
This commit is contained in:
7
.github/workflows/cla.yml
vendored
7
.github/workflows/cla.yml
vendored
@@ -6,6 +6,12 @@ on:
|
|||||||
types: [opened, synchronize]
|
types: [opened, synchronize]
|
||||||
merge_group:
|
merge_group:
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
actions: write
|
||||||
|
contents: write
|
||||||
|
pull-requests: write
|
||||||
|
statuses: write
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
CLAssistant:
|
CLAssistant:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
@@ -15,7 +21,6 @@ jobs:
|
|||||||
uses: contributor-assistant/github-action@v2.6.1
|
uses: contributor-assistant/github-action@v2.6.1
|
||||||
env:
|
env:
|
||||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_PERSONAL_ACCESS_TOKEN }}
|
|
||||||
with:
|
with:
|
||||||
path-to-signatures: "signatures/version1/cla.json"
|
path-to-signatures: "signatures/version1/cla.json"
|
||||||
path-to-document: "https://www.cloudflare.com/cla/"
|
path-to-document: "https://www.cloudflare.com/cla/"
|
||||||
|
|||||||
Reference in New Issue
Block a user