ci: adjust permissions so that comments can be put on prs and issues (#…

…1277) * ci: adjust permissions so that semantic-release can post comments * ci: harden permissions for `commitlint` and `danger` jobs
jest-community · Nov 4, 2022 · 49e6f2f · 49e6f2f
1 parent 96557c4
commit 49e6f2f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -1,6 +1,9 @@
 name: Lint
 on: [pull_request]
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   commitlint:
     runs-on: ubuntu-latest
@@ -14,6 +17,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   danger:
+    permissions:
+      contents: read # to fetch code (actions/checkout)
+      issues: write # to create comment
+      pull-requests: write # to create comment
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -130,6 +130,8 @@ jobs:
   release:
     permissions:
       contents: write # for semantic-release
+      issues: write # to create comment
+      pull-requests: write # to create comment
 
     if:
       # prettier-ignore