Skip to content

ci(proposals): declare contents: read + actions: write#83

Merged
bwplotka merged 1 commit into
prometheus:mainfrom
arpitjain099:ci/add-permissions
May 20, 2026
Merged

ci(proposals): declare contents: read + actions: write#83
bwplotka merged 1 commit into
prometheus:mainfrom
arpitjain099:ci/add-permissions

Conversation

@arpitjain099
Copy link
Copy Markdown
Contributor

Pins the default GITHUB_TOKEN to read-only on contents plus the cache save path. The only workflow uses actions/cache@v3 for the Go module cache, which saves on miss and therefore needs actions: write.

The workflow uses actions/cache@v3 for the Go module cache (saves on
miss), so it needs contents: read + actions: write.

Signed-off-by: arpitjain099 <arpitjain099@gmail.com>
@arpitjain099
Copy link
Copy Markdown
Contributor Author

Hi @bwplotka, gentle ping on this. The PR has been open for 4 days without a review. I noticed you've been on the recent-merger side of recent merges in this repo, so I thought I'd reach out. When you have a moment, would you mind giving this a quick look? No urgency, just trying to keep it on the radar. Happy to address any feedback.

@bwplotka
Copy link
Copy Markdown
Member

Thanks!

@bwplotka bwplotka merged commit 38f7e70 into prometheus:main May 20, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants