From: Josh Soref <2119212+jsoref@users.noreply.github.com>
Date: Tue, 6 Dec 2022 19:14:02 +0000 (-0500)
Subject: Document permissions grants
X-Git-Tag: dnsdist-1.8.0-rc3~10^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bbfaea27eb33b9c02f7efb7db7df7bfe906586ec;p=thirdparty%2Fpdns.git

Document permissions grants
---

diff --git a/.github/workflows/spelling3.yml b/.github/workflows/spelling3.yml
index 7a8f413390..5888f89a12 100644
--- a/.github/workflows/spelling3.yml
+++ b/.github/workflows/spelling3.yml
@@ -22,8 +22,14 @@ jobs:
   spelling:
     name: Spell checking
     permissions:
+      # contents-read is needed to checkout in private repositories
       contents: read
+      # actions-read is needed (possibly only for private repositories)
+      # to identify the workflow's filename until
+      # https://github.com/actions/runner/issues/853 is fixed
       actions: read
+      # security-events-write is needed according to the documentation:
+      # https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/uploading-a-sarif-file-to-github#uploading-a-code-scanning-analysis-with-github-actions
       security-events: write
     outputs:
       followup: ${{ steps.spelling.outputs.followup }}