mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
The currently recommended best practice for Github action workflows is to set top-level permissions to read only. And if the job uses the automatic `GITHUB_TOKEN`, fine-grained permissions for each job based on the job's requirements should also be added. All existing workflows in the repository now have top-level read only permission blocks. Only the `scorecard` workflow currently requires additional job level permissions and the minimum set of permissions were already present for the job. PR Close #45177 |
||
|---|---|---|
| .. | ||
| dev-infra.yml | ||
| feature-requests.yml | ||
| lock-closed.yml | ||
| scorecard.yml | ||