Actions/download-artifact
1
Fork 0
mirror of https://github.com/actions/download-artifact.git synced 2025-11-01 05:23:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge 86f43ed3c7e3bb5d2cb852949f645c875e468568 into 4a24838f3d5601fd639834081e118c2995d51e1c

Browse Source
This commit is contained in:
Kylie Stradley 2025-09-24 13:27:41 -07:00 committed by GitHub
commit d5d20566e6
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@ -327,3 +327,10 @@ If you must preserve permissions, you can `tar` all of your files together befor
name: my-artifact
path: my_files.tar
```
# Recommended Permissions
The `actions/download-artifact` workflow relies on an internal authentication pattern and does not use the GITHUB_TOKEN, to reduce risk of over-privileged token, jobs that use `actions/download-artifact` should set permissions to none:
```yaml
perm