Using gh run download requires actions:read

check-spelling@v0.0.23 will use gh run download to retrieve artifacts which requires actions:read.
check-spelling · Jan 29, 2024 · 2c93afa · 2c93afa
1 parent 3402c02
commit 2c93afa
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
@@ -114,6 +114,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: spelling
     permissions:
+      actions: read
       contents: write
     if: (success() || failure()) && needs.spelling.outputs.followup && github.event_name == 'push'
     steps:
@@ -130,6 +131,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: spelling
     permissions:
+      actions: read
       contents: read
       pull-requests: write
     if: (success() || failure()) && needs.spelling.outputs.followup && contains(github.event_name, 'pull_request')