Wrong possible id-token permissions types listed #33483
Labels
actions
This issue or pull request should be reviewed by the docs actions team
content
This issue or pull request belongs to the Docs Content team
waiting for review
Issue/PR is waiting for a writer's review
Comments
|
Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines. |
|
@cmaster11 Thank you for opening this issue! I'll get this triaged for review ✨ |
This comment was marked as spam.
This comment was marked as spam.
This comment was marked as spam.
This comment was marked as spam.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Code of Conduct
What article on docs.github.com is affected?
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
What part(s) of the article would you like to see updated?
In the Defining access for the GITHUB_TOKEN scopes section, the
id-tokenpermission is listed withread|write|none, but that permission cannot be set toread.Trying to do so will produce:
Probably you want to list
write|none?I see in https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#understanding-the-oidc-token that it also lists the
readpermission and a thread that mentions it. Is the read permission available ONLY in specific conditions?Additional information
No response
The text was updated successfully, but these errors were encountered: