fix GITHUB_TOKEN permissions in workflows (#11392)

This pull request updates GitHub Actions workflow files to explicitly
set permissions for certain actions. (fixing the permissions issues)

**Workflow permissions updates:**

* Added explicit `issues: write` permission to the `assign.yml` workflow
to ensure it can modify issues as needed.
* Set `contents: write`, `actions: write`, and `checks: write`
permissions in the `build_all.yml` workflow to allow the workflow to
interact with repository contents, manage actions, and update checks.
This commit is contained in:
Nanashi 2025-11-18 09:22:47 -06:00 committed by GitHub
parent 8b812e0b18
commit aa5350a6fe
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 15 additions and 2 deletions

View file

@ -7,6 +7,9 @@ on:
types: [created]
workflow_dispatch:
permissions:
issues: write
jobs:
assign:
permissions:

View file

@ -46,7 +46,10 @@ on:
concurrency:
group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
permissions:
contents: write
checks: write
jobs:
build_linux:
@ -183,3 +186,4 @@ jobs:
asset_name: OrcaSlicer-Linux-flatpak_nightly_${{ matrix.variant.arch }}.flatpak
asset_content_type: application/octet-stream
max_releases: 1 # optional, if there are more releases than this matching the asset_name, the oldest ones are going to be deleted

View file

@ -15,7 +15,10 @@ on:
force-build:
required: false
type: boolean
permissions:
actions: write
jobs:
check_cache: # determines if there is a cache and outputs variables used in caching process
name: Check Cache

View file

@ -23,6 +23,9 @@ on:
required: false
type: boolean
permissions:
actions: write
jobs:
build_deps:
name: Build Deps