docs: correct release token scopes
This commit is contained in:
parent
088e7e2d66
commit
0edba09a8a
2 changed files with 6 additions and 3 deletions
|
|
@ -5,9 +5,11 @@
|
||||||
# Requirements:
|
# Requirements:
|
||||||
# - A Forgejo Actions runner on the instance. Adjust `runs-on` to a label
|
# - A Forgejo Actions runner on the instance. Adjust `runs-on` to a label
|
||||||
# your runner actually advertises (common: docker, ubuntu-latest).
|
# your runner actually advertises (common: docker, ubuntu-latest).
|
||||||
# - A repository/org secret RELEASE_TOKEN: a token with package:write and
|
# - A repository/org secret RELEASE_TOKEN: a token with read:user,
|
||||||
# repository:write scopes for an account allowed to publish packages
|
# write:package and write:repository scopes for an account allowed to
|
||||||
# under the heavy-duty org.
|
# publish packages under the heavy-duty org. read:user is required because
|
||||||
|
# publish-release.sh runs `stoke auth login`, which validates the token
|
||||||
|
# against /user.
|
||||||
|
|
||||||
name: release
|
name: release
|
||||||
on:
|
on:
|
||||||
|
|
|
||||||
1
changelog.d/60.md
Normal file
1
changelog.d/60.md
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
- Correct the release workflow's documented token scopes to include the identity check required before publishing. (#60).
|
||||||
Loading…
Reference in a new issue