Merge 86f43ed3c7 into de96f4613b

Add Recommended Permissions
To reduce risk of over-privileged tokens, we are adding recommended permissions to popular GitHub-owned Actions READMEs
2025-09-22 11:47:52 +00:00 · 2025-08-06 10:01:35 -04:00 · 2025-01-21 21:30:55 -05:00
1 changed files with 7 additions and 0 deletions
--- a/README.md
+++ b/README.md
@ -325,3 +325,10 @@ If you must preserve permissions, you can `tar` all of your files together befor
    name: my-artifact
    path: my_files.tar
 ```
+
+# Recommended Permissions
+
+The `actions/download-artifact` workflow relies on an internal authentication pattern and does not use the GITHUB_TOKEN, to reduce risk of over-privileged token, jobs that use `actions/download-artifact` should set permissions to none:
+
+```yaml
+perm
Author	SHA1	Message	Date
Kylie Stradley	d2fd2c51b1	Merge `86f43ed3c7` into `de96f4613b`	2025-08-06 10:01:35 -04:00
Kylie Stradley	86f43ed3c7	Add Recommended Permissions To reduce risk of over-privileged tokens, we are adding recommended permissions to popular GitHub-owned Actions READMEs	2025-01-21 21:30:55 -05:00