mirror of
https://github.com/dependabot/fetch-metadata.git
synced 2026-03-12 18:07:12 -04:00
Several of these job steps that use `GITHUB_TOKEN` are read-only operations, so they don't need elevated permissions for the `GITHUB_TOKEN`. And the jobs that _do_ need elevated permissions we're already using a PAT, so it's not even using the `GITHUB_TOKEN`. So no need for any custom permissions on the `GITHUB_TOKEN` at all.