pass GITHUB_TOKEN to action ; set permissions before calling action

drink7036290 · Dec 23, 2024 · 7796620 · 7796620
1 parent 26f4bdc
commit 7796620
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/.github/actions/basics/action.yml b/.github/actions/basics/action.yml
@@ -100,7 +100,7 @@ runs:
     - name: Run linkspector
       uses: umbrelladocs/action-linkspector@v1
       with:
-        github_token: ${{ secrets.github_token }}
+        github_token: ${{ inputs.github_token }}
         reporter: github-pr-review
         fail_on_error: true
 

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -286,8 +286,12 @@ jobs:
   # Basic actions that must pass before we kick off more expensive tests.
   basics:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/basics
         with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           rust_nightly: ${{ env.rust_nightly }}
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -17,8 +17,12 @@ env:
 jobs:
   basics:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/basics
         with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           rust_nightly: ${{ env.rust_nightly }}