From 3f2a7554c857dfda5142fd0be02912d80515aa6b Mon Sep 17 00:00:00 2001 From: Ian Lewis Date: Thu, 15 Sep 2022 23:47:21 +0900 Subject: [PATCH] Remove contents:read from privacy-check (#855) * Remove contents:read from privacy-check Signed-off-by: Ian Lewis * Update action doc Signed-off-by: Ian Lewis Signed-off-by: Ian Lewis --- .github/actions/privacy-check/action.yml | 2 +- .github/workflows/builder_go_slsa3.yml | 2 -- .github/workflows/generator_container_slsa3.yml | 2 -- .github/workflows/generator_generic_slsa3.yml | 2 -- 4 files changed, 1 insertion(+), 7 deletions(-) diff --git a/.github/actions/privacy-check/action.yml b/.github/actions/privacy-check/action.yml index de20bf2aa4..1785a04036 100644 --- a/.github/actions/privacy-check/action.yml +++ b/.github/actions/privacy-check/action.yml @@ -2,7 +2,7 @@ name: "Privacy check" description: "Checks if a repository is private and fails if it is." inputs: token: - description: "The GitHub Actions token. It must have contents:read or repo scope." + description: "The GitHub Actions token." required: false default: ${{ github.token }} override: diff --git a/.github/workflows/builder_go_slsa3.yml b/.github/workflows/builder_go_slsa3.yml index 68c6df15fd..929de7469d 100644 --- a/.github/workflows/builder_go_slsa3.yml +++ b/.github/workflows/builder_go_slsa3.yml @@ -68,8 +68,6 @@ on: jobs: privacy-check: runs-on: ubuntu-latest - permissions: - contents: read # Needed to read repo info. steps: - name: Check private repos uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22 diff --git a/.github/workflows/generator_container_slsa3.yml b/.github/workflows/generator_container_slsa3.yml index 8aadcd6a8c..86b2e3cf08 100644 --- a/.github/workflows/generator_container_slsa3.yml +++ b/.github/workflows/generator_container_slsa3.yml @@ -52,8 +52,6 @@ on: jobs: privacy-check: runs-on: ubuntu-latest - permissions: - contents: read # Needed to read repo info. steps: - name: Check private repos uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22 diff --git a/.github/workflows/generator_generic_slsa3.yml b/.github/workflows/generator_generic_slsa3.yml index 746d74dbfd..e0a3877be5 100644 --- a/.github/workflows/generator_generic_slsa3.yml +++ b/.github/workflows/generator_generic_slsa3.yml @@ -66,8 +66,6 @@ on: jobs: privacy-check: runs-on: ubuntu-latest - permissions: - contents: read # Needed to read repo info. steps: - name: Check private repos uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22