|
15 | 15 | runs-on: ${{ matrix.os }} |
16 | 16 | if: "!contains(github.event.head_commit.message, 'skip ci')" |
17 | 17 | timeout-minutes: 20 |
| 18 | + permissions: |
| 19 | + contents: write |
| 20 | + issues: write |
| 21 | + pull-requests: write |
18 | 22 | strategy: |
19 | 23 | fail-fast: false |
20 | 24 | matrix: |
@@ -76,13 +80,13 @@ jobs: |
76 | 80 | npx @vscode/vsce package -o svn-scm-community.vsix |
77 | 81 | npm run semantic-release |
78 | 82 | env: |
79 | | - VSCE_TOKEN: ${{ secrets.vsceToken }} |
80 | | - GITHUB_TOKEN: ${{ secrets.githubToken }} |
81 | | - GH_TOKEN: ${{ secrets.githubToken }} |
82 | | - GIT_AUTHOR_EMAIL: ${{ secrets.gitEmail }} |
83 | | - GIT_COMMITTER_EMAIL: ${{ secrets.gitEmail }} |
84 | | - GIT_AUTHOR_NAME: ${{ secrets.gitName }} |
85 | | - GIT_COMMITTER_NAME: ${{ secrets.gitName }} |
| 83 | + VSCE_TOKEN: ${{ secrets.VSCE_TOKEN }} |
| 84 | + GITHUB_TOKEN: ${{ github.token }} |
| 85 | + GH_TOKEN: ${{ github.token }} |
| 86 | + GIT_AUTHOR_EMAIL: ${{ secrets.GIT_EMAIL }} |
| 87 | + GIT_COMMITTER_EMAIL: ${{ secrets.GIT_EMAIL }} |
| 88 | + GIT_AUTHOR_NAME: ${{ secrets.GIT_NAME }} |
| 89 | + GIT_COMMITTER_NAME: ${{ secrets.GIT_NAME }} |
86 | 90 |
|
87 | 91 | eslint: |
88 | 92 | runs-on: ubuntu-latest |
@@ -174,6 +178,10 @@ jobs: |
174 | 178 | runs-on: ubuntu-latest |
175 | 179 | if: (github.ref == 'refs/heads/master' && github.event_name == 'push') || github.event_name == 'workflow_dispatch' |
176 | 180 | needs: [build, eslint, artifact] |
| 181 | + permissions: |
| 182 | + contents: write |
| 183 | + issues: write |
| 184 | + pull-requests: write |
177 | 185 |
|
178 | 186 | steps: |
179 | 187 | - name: Checkout |
@@ -229,7 +237,7 @@ jobs: |
229 | 237 | svn-scm-community-ovsx.vsix |
230 | 238 | generate_release_notes: true |
231 | 239 | env: |
232 | | - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
| 240 | + GITHUB_TOKEN: ${{ github.token }} |
233 | 241 |
|
234 | 242 | - name: Publish to OpenVSX Registry |
235 | 243 | if: startsWith(github.ref, 'refs/tags/') |
|
0 commit comments