From aed56a82845b23e9930c94d3020c5c03ebe11112 Mon Sep 17 00:00:00 2001 From: Ben Mares Date: Sun, 22 Dec 2024 18:28:02 +0100 Subject: [PATCH] Specify write pull-requests permissions at job level rather than workflow level Given that there's a single job, it doesn't matter either way, but we might as well scope the permissions more closely to where they are actually required. That way, if a user were to add additional jobs, they wouldn't default to having write permissions. --- preview/README.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/preview/README.md b/preview/README.md index fe7eb6d..85885e4 100644 --- a/preview/README.md +++ b/preview/README.md @@ -28,12 +28,11 @@ on: # paths: # - "docs/**" -permissions: - pull-requests: write - jobs: documentation-links: runs-on: ubuntu-latest + permissions: + pull-requests: write steps: - uses: readthedocs/actions/preview@v1 with: