Github Actions Permissions

Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.

onfire7777 e7dfb7d 423 B Updated

File contents

GitHub Actions Permissions

  • Prefer workflow-level contents: read and pull-requests: read.
  • Add narrower job permissions only when needed.
  • Secret scanning must not require write permissions.
  • Never use pull_request_target without explicit threat modeling.

onfire7777/five-agent-dev-team/tree/main/.agents/skills/github-actions-permissions commit e7dfb7d04f

Frequently asked questions

npx skillmds@latest add onfire7777/github-actions-permissions