Obtain job-level token by default for less privileged runs (#198)

2026-01-29 21:30:08 +00:00
parent bb7e7584d4
commit 2daab6fc78
6 changed files with 73 additions and 37 deletions
@@ -30,6 +30,10 @@ inputs:
  bash:
    description: "Bash permission: disabled, restricted (filters secrets from env vars), or enabled. Public repos default to restricted for security; private repos default to enabled."
    required: false
+  token:
+    description: "GitHub-provided token with job-scoped permissions. Do not set this unless you know what you are doing."
+    required: false
+    default: ${{ github.token }}

 runs:
  using: "node24"