Arpit Jain 946f2809f9 ci: declare GITHUB_TOKEN scope explicitly for three workflows (#40520) ...

distributions.yml and modern-distributions.yml only check out the repo and run
python validators, so they get contents: read.

winget.yml runs on release: published and forwards a precomputed artifact URL
to wingetcreate using the WINGET_TOKEN secret (an external token). It does not
checkout the repo and does not call any GitHub API endpoint, so it gets
permissions: {} (no scopes needed).

This brings the three workflows in line with the other workflows in this repo
that already declare explicit permissions.

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>

2026-05-28 16:50:14 -07:00

..

distributions.yml

ci: declare GITHUB_TOKEN scope explicitly for three workflows (#40520)

2026-05-28 16:50:14 -07:00

documentation.yml

Only allow one documentation deployment workflow at a time (#40383)

2026-05-01 13:39:29 -07:00

issue_edited.yml

Remove 'similar issues' workflow since it's not running anymore (#12872)

2025-05-02 12:00:21 -07:00

modern-distributions.yml

ci: declare GITHUB_TOKEN scope explicitly for three workflows (#40520)

2026-05-28 16:50:14 -07:00

new_issue_comment.yml

Various WTI improvments (#11516)

2024-04-26 11:59:36 -07:00

new_issue.yml

Remove 'similar issues' workflow since it's not running anymore (#12872)

2025-05-02 12:00:21 -07:00

winget.yml

ci: declare GITHUB_TOKEN scope explicitly for three workflows (#40520)

2026-05-28 16:50:14 -07:00