Skip to content

Commit 3d207d8

Browse files
authored
ci: restrict write permissions to job scope in deploy-docs workflow (#181)
* disable write permissions on global scope for deploy documentation workflow * doc: fix readme broken link
1 parent 2c21f72 commit 3d207d8

3 files changed

Lines changed: 5 additions & 3 deletions

File tree

.github/workflows/deploy-docs.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,10 +8,12 @@ on:
88
- 'docs/**' # Trigger only when the source docs files are modified
99

1010
permissions:
11-
contents: write
11+
contents: read
1212

1313
jobs:
1414
build_and_deploy:
15+
permissions:
16+
contents: write # for peaceiris/actions-gh-pages to push pages branch
1517
name: Build and deploy documentation
1618
runs-on: ubuntu-latest
1719
steps:

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373

7474
create_release:
7575
permissions:
76-
contents: write # for actions/create-release to create a release
76+
contents: write # for actions/create-release to create a release
7777
id-token: write # for actions/attest-build-provenance to attest provenance
7878
attestations: write # for actions/attest-build-provenance to attest provenance
7979
name: Create release

docs/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
## Overview
44

55
This repository contains the source files for the ITT/JIT APIs online documentation,
6-
which is hosted on GitHub Pages. [View the documentation here](link).
6+
which is hosted on GitHub Pages. [View the documentation here](https://intel.github.io/ittapi).
77

88
## Build Documentation from Sources
99

0 commit comments

Comments
 (0)