CI (Buildbot, GHA): add a note about token permissions

JuliaLang · Aug 9, 2021 · b098cab · b098cab
1 parent 0d1e548
commit b098cab
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/statuses.yml b/.github/workflows/statuses.yml
@@ -10,6 +10,7 @@
 # Here are some steps that we take in this workflow file for security reasons:
 # 1. We do not checkout any code.
 # 2. We do not run any external actions.
+# 3. We only give `GITHUB_TOKEN` the minimum necessary set of permissions.
 
 name: Statuses