Actions/download-artifact
1
Fork 0
mirror of https://github.com/actions/download-artifact.git synced 2025-09-02 14:00:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge 86f43ed3c7e3bb5d2cb852949f645c875e468568 into abefc31eafcfbdf6c5336127c1346fdae79ff41c

Browse Source
This commit is contained in:
Kylie Stradley 2025-08-26 00:10:06 -07:00 committed by GitHub
commit d93203d1c2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@ -327,3 +327,10 @@ If you must preserve permissions, you can `tar` all of your files together befor
name: my-artifact
path: my_files.tar
```
# Recommended Permissions
The `actions/download-artifact` workflow relies on an internal authentication pattern and does not use the GITHUB_TOKEN, to reduce risk of over-privileged token, jobs that use `actions/download-artifact` should set permissions to none:
```yaml
perm