GitHub Actions - Updating the default GITHUB_TOKEN permissions to read-only - GitHub Changelog

GitHub Actions – Updating the default GITHUB_TOKEN permissions to read-only Previously, GitHub Actions gets a GITHUB_TOKEN with both read/write permissions by default whenever Actions is enabled on a repository. As a default, this is too permissive, so to improve security we would like to change the default going forward to a read-only token. You can still flip it to read/write if needed. This cha

[gabill]

だとうだとおもう。

[efcl]

`contents: read` がデフォルトとなる。 `permissions`を付与しないと動かなくなるActionが増える。移行ツール https://efcl.info/2023/02/01/update-github-actions-permissions-v2/