Actions/download-artifact
1
Fork 0
mirror of https://github.com/actions/download-artifact.git synced 2025-12-16 22:49:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge 86f43ed3c7e3bb5d2cb852949f645c875e468568 into f093f21ca4cfa7c75ccbbc2be54da76a0c7e1f05

Browse Source
This commit is contained in:
Kylie Stradley 2025-11-03 12:23:46 -08:00 committed by GitHub
commit c6147b0653
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@ -327,3 +327,10 @@ If you must preserve permissions, you can `tar` all of your files together befor
name: my-artifact
path: my_files.tar
```
# Recommended Permissions
The `actions/download-artifact` workflow relies on an internal authentication pattern and does not use the GITHUB_TOKEN, to reduce risk of over-privileged token, jobs that use `actions/download-artifact` should set permissions to none:
```yaml
perm