[BRE-1333] Added permissions to token generation step to limit token scope (#2161)

This commit is contained in:
gitclonebrian 2025-11-25 11:06:11 -05:00 committed by GitHub
parent e053cc013b
commit 0f1447a62b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -11,8 +11,7 @@ jobs:
name: Crowdin Pull - ${{ github.event_name }}
runs-on: ubuntu-24.04
permissions:
contents: write
pull-requests: write
contents: read
id-token: write
steps:
- name: Checkout repo
@ -50,6 +49,8 @@ jobs:
with:
app-id: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-ID }}
private-key: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-KEY }}
permission-contents: write # for pushing branches
permission-pull-requests: write # for creating pull requests
- name: Download translations
uses: crowdin/github-action@0749939f635900a2521aa6aac7a3766642b2dc71 # v2.11.0