@@ -9,8 +9,8 @@ don't allow this because they don't work on a level of individual jobs or steps.
99
1010** Real world usage examples:**
1111
12- - [ sentry.io] ( https://sentry.io/ ) - [ backend-test-py3.6. yml] ( https://github.com/getsentry/sentry/blob/ca0e43dc5602a9ab2e06d3f6397cc48fb5a78541 /.github/workflows/backend-test-py3.6. yml#L32 )
13- - [ GoogleChrome/web.dev] ( https://web.dev/ ) - [ lint-and-test- workflow.yml] ( https://github.com/GoogleChrome/web.dev/blob/e1f0c28964e99ce6a996c1e3fd3ee1985a7a04f6 /.github/workflows/lint-and-test- workflow.yml#L33 )
12+ - [ sentry.io] ( https://sentry.io/ ) - [ backend. yml] ( https://github.com/getsentry/sentry/blob/2ebe01feab863d89aa7564e6d243b6d80c230ddc /.github/workflows/backend. yml#L36 )
13+ - [ GoogleChrome/web.dev] ( https://web.dev/ ) - [ lint-workflow.yml] ( https://github.com/GoogleChrome/web.dev/blob/3a57b721e7df6fc52172f676ca68d16153bda6a3 /.github/workflows/lint-workflow.yml#L26 )
1414
1515## Supported workflows
1616
@@ -19,6 +19,7 @@ don't allow this because they don't work on a level of individual jobs or steps.
1919 or ** [ pull_request_target] ( https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_target ) ** event
2020 - Changes are detected against the pull request base branch
2121 - Uses GitHub REST API to fetch a list of modified files
22+ - Requires [ pull-requests: read] ( https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs ) permission
2223- ** Feature branches:**
2324 - Workflow triggered by ** [ push] ( https://docs.github.com/en/actions/reference/events-that-trigger-workflows#push ) **
2425 or any other ** [ event] ( https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows ) **
@@ -173,7 +174,7 @@ jobs:
173174 tests:
174175 runs-on: ubuntu-latest
175176 steps:
176- - uses: actions/checkout@v2
177+ - uses: actions/checkout@v3
177178 - uses: dorny/paths-filter@v2
178179 id: filter
179180 with:
@@ -209,6 +210,9 @@ jobs:
209210 # JOB to run change detection
210211 changes:
211212 runs-on: ubuntu-latest
213+ # Required permissions
214+ permissions:
215+ pull-requests: read
212216 # Set job outputs to values from filter step
213217 outputs:
214218 backend: ${{ steps.filter.outputs.backend }}
@@ -230,7 +234,7 @@ jobs:
230234 if: ${{ needs.changes.outputs.backend == 'true' }}
231235 runs-on: ubuntu-latest
232236 steps:
233- - uses: actions/checkout@v2
237+ - uses: actions/checkout@v3
234238 - ...
235239
236240 # JOB to build and test frontend code
@@ -239,7 +243,7 @@ jobs:
239243 if: ${{ needs.changes.outputs.frontend == 'true' }}
240244 runs-on: ubuntu-latest
241245 steps:
242- - uses: actions/checkout@v2
246+ - uses: actions/checkout@v3
243247 - ...
244248` ` `
245249
@@ -253,6 +257,9 @@ jobs:
253257 # JOB to run change detection
254258 changes:
255259 runs-on: ubuntu-latest
260+ # Required permissions
261+ permissions:
262+ pull-requests: read
256263 outputs:
257264 # Expose matched filters as job 'packages' output variable
258265 packages: ${{ steps.filter.outputs.changes }}
@@ -275,7 +282,7 @@ jobs:
275282 package: ${{ fromJSON(needs.changes.outputs.packages) }}
276283 runs-on: ubuntu-latest
277284 steps:
278- - uses: actions/checkout@v2
285+ - uses: actions/checkout@v3
279286 - ...
280287` ` `
281288
295302jobs:
296303 build:
297304 runs-on: ubuntu-latest
305+ # Required permissions
306+ permissions:
307+ pull-requests: read
298308 steps:
299- - uses: actions/checkout@v2
309+ - uses: actions/checkout@v3
300310 - uses: dorny/paths-filter@v2
301311 id: filter
302312 with:
@@ -317,7 +327,7 @@ jobs:
317327 build:
318328 runs-on: ubuntu-latest
319329 steps:
320- - uses: actions/checkout@v2
330+ - uses: actions/checkout@v3
321331 with:
322332 # This may save additional git fetch roundtrip if
323333 # merge-base is found within latest 20 commits
@@ -345,7 +355,7 @@ jobs:
345355 build:
346356 runs-on: ubuntu-latest
347357 steps:
348- - uses: actions/checkout@v2
358+ - uses: actions/checkout@v3
349359 - uses: dorny/paths-filter@v2
350360 id: filter
351361 with:
@@ -373,7 +383,7 @@ jobs:
373383 build:
374384 runs-on: ubuntu-latest
375385 steps:
376- - uses: actions/checkout@v2
386+ - uses: actions/checkout@v3
377387
378388 # Some action that modifies files tracked by git (e.g. code linter)
379389 - uses: johndoe/some-action@v1
0 commit comments