mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-20 22:42:53 -05:00
Loosened restrictions on GHA label-actions workflow
refs https://github.com/TryGhost/Toolbox/issues/381 - when using `pull_request`, the workflow doesn't have permissions to write to the PR in question - there is another trigger - `pull_request_target` - but this comes with a heap of security warnings - our use of it should be OK because we're only checking out our own Action and not code from the PR - this commit also adds permissions to specify we only want write access to issues and PRs
This commit is contained in:
parent
68ad829e1f
commit
6de598dec9
1 changed files with 5 additions and 1 deletions
6
.github/workflows/label-actions.yml
vendored
6
.github/workflows/label-actions.yml
vendored
|
@ -4,11 +4,15 @@ on:
|
|||
workflow_dispatch:
|
||||
issues:
|
||||
types: [opened, closed, labeled]
|
||||
pull_request:
|
||||
pull_request_target:
|
||||
types: [closed, labeled]
|
||||
schedule:
|
||||
- cron: '0 * * * *'
|
||||
|
||||
permissions:
|
||||
issues: write
|
||||
pull-requests: write
|
||||
|
||||
jobs:
|
||||
action:
|
||||
runs-on: ubuntu-latest
|
||||
|
|
Loading…
Add table
Reference in a new issue