Skip to content

Document how to ensure GITHUB_TOKEN permissions are permissive by default #870

@mmenavas

Description

@mmenavas

When executing the "Pantheon Review Apps" workflow, the workflow expects the repo's auto-generated GITHUB_TOKEN environment variable to have READ and WRITE permissions. According to the GitHub documentation (see screenshot below), the default permissions for repos "created on or after February 2, 2023 defaults to read-only access for all scopes" (see screenshot below). This means users of newer repos need to update the GITHUB_TOKEN default permissions.

Image

To update the GITHUB_TOKEN default permissions, follow the steps below:

  • Go to repo settings.
    Image

  • Click on Actions on General on left sidebar.
    Image

  • Scroll down to Workflow permissions, and select "Read and write permissions".
    Image

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions