mirror of
https://code.forgejo.org/actions/download-artifact
synced 2025-06-08 04:58:20 +02:00
Merge 86f43ed3c7
into d3f86a106a
This commit is contained in:
commit
3c0e1a113a
1 changed files with 7 additions and 0 deletions
|
@ -277,3 +277,10 @@ If you must preserve permissions, you can `tar` all of your files together befor
|
|||
name: my-artifact
|
||||
path: my_files.tar
|
||||
```
|
||||
|
||||
# Recommended Permissions
|
||||
|
||||
The `actions/download-artifact` workflow relies on an internal authentication pattern and does not use the GITHUB_TOKEN, to reduce risk of over-privileged token, jobs that use `actions/download-artifact` should set permissions to none:
|
||||
|
||||
```yaml
|
||||
perm
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue