include-source: false # Drop file/line/col from output skip: - Go permissions-policy: Write --- on: push jobs: # Inherit from default permissions policy build: uses: contoso/templates/.github/workflows/build.yml@v1 # Override build2: permissions: actions: write uses: contoso/templates/.github/workflows/build.yml@v1 --- contoso/templates/.github/workflows/build.yml@v1 --- on: workflow_call jobs: deploy: runs-on: ubuntu-latest steps: - run: echo 1 --- { "jobs": [ { "type": "reusableWorkflowJob", "id": "build", "name": "build", "needs": [], "if": { "type": 3, "expr": "success()" }, "ref": "contoso/templates/.github/workflows/build.yml@v1", "jobs": [ { "type": "job", "id": "deploy", "name": "deploy", "if": { "type": 3, "expr": "success()" }, "runs-on": "ubuntu-latest", "steps": [ { "id": "__run", "if": { "type": 3, "expr": "success()" }, "run": "echo 1" } ] } ] }, { "type": "reusableWorkflowJob", "id": "build2", "name": "build2", "needs": [], "if": { "type": 3, "expr": "success()" }, "ref": "contoso/templates/.github/workflows/build.yml@v1", "permissions": { "actions": "write" }, "jobs": [ { "type": "job", "id": "deploy", "name": "deploy", "if": { "type": 3, "expr": "success()" }, "permissions": { "actions": "write" }, "runs-on": "ubuntu-latest", "steps": [ { "id": "__run", "if": { "type": 3, "expr": "success()" }, "run": "echo 1" } ] } ] } ] }