upstream/packer
1
0
Fork 0
mirror of https://github.com/hashicorp/packer.git synced 2026-05-28 04:35:38 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

ci(create-release-branch): pin contents: read

Browse source 
actions-create-release-branch uses secrets.ELEVATED_GITHUB_TOKEN for
the actual push, so the default GITHUB_TOKEN can stay scoped to
read-only. Matches the top-level pattern in acceptance-test.yml,
backport.yml, issue-comment-created.yml, etc.
This commit is contained in:
arpitjain099 2026-05-13 11:01:01 +00:00
parent 342fc1c554
commit 704457fa6c
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
.github/workflows/create-release-branch.yml vendored
View file

@ -1,5 +1,12 @@
name: Create a release branch
on: [workflow_dispatch]
# The actions-create-release-branch step uses secrets.ELEVATED_GITHUB_TOKEN
# to push the release branch; the default GITHUB_TOKEN only needs read
# access for the checkout.
permissions:
contents: read
jobs:
create-branch:
runs-on: ubuntu-latest