Add check for GITHUB_TOKEN permissions (#1354)

2022-01-17 13:17:29 +05:30
parent f31e3a9c9d
commit 11778e9eb0
1 changed files with 1 additions and 0 deletions
@@ -26,6 +26,7 @@ It is not:
 - [ ] Should use sentence case for the names of workflows and steps (for example, "Run tests").
 - [ ] Should be named _only_ by the name of the language or platform (for example, "Go", not "Go CI" or "Go Build").
 - [ ] Should include comments in the workflow for any parts that are not obvious or could use clarification.
+- [ ] Should specify least priviledge [permissions](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token) for `GITHUB_TOKEN` so that the workflow runs successfully. 

 **For _CI_ workflows, the workflow:**