daniel543x/craft-common-actions
1
0 Fork 0
mirror of https://github.com/storytold/craft-common-actions.git synced 2026-11-09 04:01:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(release): clarify contributor refresh caller permissions

Browse Source
This commit is contained in:
Kristian Myram committed 2026-10-30 21:28:16 +01:00
1 parent 215a7f48c1
commit b97dadbcbe
1 file changed
+7 -1
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+7 -1
View File
@@ -68,9 +68,15 @@ jobs:
#### Automatic contributor credits (opt-in)
Apps with `scripts/refresh-contributors.py` can refresh bundled credits once before a release.
Call the read-only preparatory workflow, then pass its output to the release workflow:
Grant the caller workflow `contents: write` for release publishing, and keep the preparatory
`credits` job read-only with its job-level override. A called workflow cannot increase the
token permissions granted by its caller; see [reusable-workflow permissions](https://docs.github.com/en/actions/reference/workflows-and-actions/reusing-workflow-configurations#supported-keywords-for-jobs-that-call-a-reusable-workflow).
Call the preparatory workflow, then pass its output to the release workflow:
```yaml
permissions:
contents: write
jobs:
credits:
permissions: