GitHub Actions 1 · Secrets and security
Limit the token's permissions
Give GITHUB_TOKEN only the access the workflow needs.
permissions:
contents: read
pull-requests: write
Official GitHub Actions 1 documentation
More secrets and security commands
All secrets and security commands · GitHub Actions 1 cheatsheet