fix: add explicit permissions to CLA workflow, drop PAT (#121)

This commit is contained in:
Matt Kane
2026-04-02 18:07:59 +01:00
committed by GitHub
parent f2c10fc029
commit 61b73aeb01

View File

@@ -6,6 +6,12 @@ on:
types: [opened, synchronize] types: [opened, synchronize]
merge_group: merge_group:
permissions:
actions: write
contents: write
pull-requests: write
statuses: write
jobs: jobs:
CLAssistant: CLAssistant:
runs-on: ubuntu-latest runs-on: ubuntu-latest
@@ -15,7 +21,6 @@ jobs:
uses: contributor-assistant/github-action@v2.6.1 uses: contributor-assistant/github-action@v2.6.1
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_PERSONAL_ACCESS_TOKEN }}
with: with:
path-to-signatures: "signatures/version1/cla.json" path-to-signatures: "signatures/version1/cla.json"
path-to-document: "https://www.cloudflare.com/cla/" path-to-document: "https://www.cloudflare.com/cla/"