From b025777e7d8ac9c234a1fe728f7a2cd2bc0cb623 Mon Sep 17 00:00:00 2001 From: Yash Patel Date: Thu, 19 Oct 2023 11:58:00 -0700 Subject: [PATCH 1/2] Update release action for public repo --- .github/workflows/pipeline-release.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pipeline-release.yaml b/.github/workflows/pipeline-release.yaml index b2a01109..861a71f2 100644 --- a/.github/workflows/pipeline-release.yaml +++ b/.github/workflows/pipeline-release.yaml @@ -5,7 +5,7 @@ on: release: types: [published] -permissions: read-all +permissions: write-all jobs: add_release_asset: runs-on: ubuntu-latest @@ -14,4 +14,4 @@ jobs: - id: release-asset uses: uclahs-cds/tool-Nextflow-action/add-source-with-submodules@latest with: - my-token: ${{ secrets.UCLAHS_CDS_REPO_READ_TOKEN }} + my-token: ${{ secrets.GITHUB_TOKEN }} From e1c60ba462af11adadd1db5167fb1b9c4ed6658c Mon Sep 17 00:00:00 2001 From: Yash Patel <86321070+yashpatel6@users.noreply.github.com> Date: Thu, 19 Oct 2023 14:42:10 -0700 Subject: [PATCH 2/2] Granular permissions only for contents --- .github/workflows/pipeline-release.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pipeline-release.yaml b/.github/workflows/pipeline-release.yaml index 861a71f2..70c7f200 100644 --- a/.github/workflows/pipeline-release.yaml +++ b/.github/workflows/pipeline-release.yaml @@ -5,7 +5,8 @@ on: release: types: [published] -permissions: write-all +permissions: + contents: write jobs: add_release_asset: runs-on: ubuntu-latest