diff options
Diffstat (limited to '.github/workflows/ai-validation.yml')
| -rw-r--r-- | .github/workflows/ai-validation.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/.github/workflows/ai-validation.yml b/.github/workflows/ai-validation.yml index 36f5cb6c..1265b789 100644 --- a/.github/workflows/ai-validation.yml +++ b/.github/workflows/ai-validation.yml @@ -209,6 +209,11 @@ jobs: private-key: ${{ secrets.VYOS_APP_PRIVATE_KEY }} owner: VyOS-Networks repositories: vyos-1x,vyos-docs-opus-reviewer + # Token is used only for read-only operations: sparse-checkout + # of branches.json from the reviewer repo, full checkout of + # vyos-1x, and download of the reference-DB release asset. No + # write back to either repo. Scope the App token accordingly. + permission-contents: read - name: Sparse-checkout branches.json from reviewer if: steps.secrets-check.outputs.skip != 'true' |