Current Behavior
The workflows and the job(s) in them default to 'write' permissions set at the repository. Permissions for the GITHUB_TOKEN is not set individually at the workflow level.
Desired Behavior
Workflows permissions should default to 'read' and GITHUB_TOKEN permissions should be modified in workflow files to use privileged permissions as required.
Implementation
Acceptance Tests
Current Behavior
The workflows and the job(s) in them default to 'write' permissions set at the repository. Permissions for the
GITHUB_TOKENis not set individually at the workflow level.Desired Behavior
Workflows permissions should default to 'read' and
GITHUB_TOKENpermissions should be modified in workflow files to use privileged permissions as required.Implementation
Acceptance Tests
Contributor Guides and Handbook