ci: adjust permissions so that comments can be put on prs and issues (#…

…1277) * ci: adjust permissions so that semantic-release can post comments * ci: harden permissions for `commitlint` and `danger` jobs
jest-community · Nov 4, 2022 · 49e6f2f · 49e6f2f
1 parent 96557c4
commit 49e6f2f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -1,6 +1,9 @@
 name: Lint
 on: [pull_request]
 
+permissions:
+ contents: read # to fetch code (actions/checkout)
+
 jobs:
  commitlint:
  runs-on: ubuntu-latest
@@ -14,6 +17,10 @@ jobs:
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  danger:
+ permissions:
+ contents: read # to fetch code (actions/checkout)
+ issues: write # to create comment
+ pull-requests: write # to create comment
  runs-on: ubuntu-latest
  steps:
  - uses: actions/checkout@v3

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -130,6 +130,8 @@ jobs:
  release:
  permissions:
  contents: write # for semantic-release
+ issues: write # to create comment
+ pull-requests: write # to create comment
 
  if:
  # prettier-ignore