From 617e9aad8a915c550d2f6c4d20c2b82f1dc6a858 Mon Sep 17 00:00:00 2001 From: Nicholas Browning Date: Sat, 8 Jun 2024 19:57:40 +0000 Subject: [PATCH] fix((docs)): update documentation about token permissions This is not really a "fix", but I want to trigger a patch, to allow Semantic Release library to run through it's CI action again. --- INITIALIZATION.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 INITIALIZATION.md diff --git a/INITIALIZATION.md b/INITIALIZATION.md new file mode 100644 index 0000000..20ca653 --- /dev/null +++ b/INITIALIZATION.md @@ -0,0 +1,15 @@ +### This project requires two tokens +- npm token +- github token + +Each of these tokesn will be provided to the Project's setting's `Security and variables/actions` page. + +#### Github Token +Based on [this article](https://www.tevpro.com/blog/calibrating-permissions-using-fine-grained-tokens), we need +specific permissions when using the Granular-access tokens from Github. Specifically: +- Actions - Access: Read/Write +- Commit Statuses - Access: Read-only +- Contents - Access: Read/Write +- Issues - Access: Read/Write +- Metadata - Access: Read-only +- Pull Requests - Access: Read-only