Skip to content

Maximum access by forked repos is inaccurate #22493

Closed
@jsoref

Description

@jsoref

Code of Conduct

What article on docs.github.com is affected?

https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

What part(s) of the article would you like to see updated?

As noted in #22492, Maximum access by forked repos really means Maximum access for pull requests from forked repos.

But, beyond that, https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories says:

Available to private repositories only, you can configure these policy settings for organizations, or repositories.
...
Send write tokens to workflows from pull requests - Allows pull requests from forks to use a GITHUB_TOKEN with write permission.

Thus, the correct text would be Maximum access for pull requests to public repositories from forked repos.

I know that's a mouthful and too much to stick into a column heading, but the current text is fairly misleading and finding all the caveats is not fun.

Additional information

PowerDNS/pdns#12249 (comment)

Metadata

Metadata

Assignees

Labels

actionsThis issue or pull request should be reviewed by the docs actions teamcontentThis issue or pull request belongs to the Docs Content teamrepositoriesContent related to repositorieswaiting for reviewIssue/PR is waiting for a writer's review

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions