github-actions-permissions
Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.
Source facts
- Repository
- onfire7777/five-agent-dev-team
- Last source activity
- April 27, 2026 at 07:04
- Detected SKILL.md language
- English
- Stars
- 0
- Forks
- 0
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- github-actions-permissions
- description
- Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.
# GitHub Actions Permissions
- Prefer workflow-level `contents: read` and `pull-requests: read`.
- Add narrower job permissions only when needed.
- Secret scanning must not require write permissions.
- Never use `pull_request_target` without explicit threat modeling.
View on GitHub