mirror of
https://github.com/rclone/rclone.git
synced 2026-05-12 10:03:35 -04:00
a2ce8b04f3
This restricts the GITHUB_TOKEN to least-privilege in all workflows, fixing CodeQL code-scanning alerts for actions/missing-workflow-permissions.
18 lines
342 B
YAML
18 lines
342 B
YAML
name: Publish to Winget
|
|
on:
|
|
release:
|
|
types: [released]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
publish:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: vedantmgoyal2009/winget-releaser@v2
|
|
with:
|
|
identifier: Rclone.Rclone
|
|
installers-regex: '-windows-\w+\.zip$'
|
|
token: ${{ secrets.WINGET_TOKEN }}
|