permissions:

permissions for the GITHUB_TOKEN (doc), can be defined up to more than 15 scopes, including:

actions	read/write	none	read
attestations	read/write	none	read
checks	read/write	none	read
contents	read/write	read	read
deployments	read/write	none	read
discussions	read/write	none	read
id-token	none	none	none
issues	read/write	none	read
metadata	read	read	read
models	read	none	none
packages	read/write	read	read
pages	read/write	none	read
pull-requests	read/write	none	read
security-events	read/write	none	read
statuses

Examples

jobs:
  build-and-deploy-docker-image:
    runs-on: self-hosted
    permissions:
      id-token: write
      contents: read

permissions:
  contents: read
  pull-requests: write

permissions:
  issues: write

• https://www.wikieduonline.com/wiki/Publishing_and_installing_a_package_with_GitHub_Actions#Official_example_1_.28comments_deleted.29

permissions:
    contents: read
    packages: write
    attestations: write
    id-token: write

Related

• jobs:

See also

• permissions:
• GITHUB_TOKEN, permissions:
• GitHub Actions, act, .github/workflows/, ~/actions-runner/, svc.sh, deploy:, run:, runs-on:, uses:, steps:, jobs:, on:, env:, uses:, script:, continue-on-error:, template:, aws-actions, inputs:, GITHUB_ENV, needs:, github., GitHub runner, my-docker-publish.yml, GitHub Actions variables, GitHub Actions contexts, GitHub Actions Importer, If:, SLSA, Actions Runner Controller (ARC), $GITHUB OUTPUT, notify:, Marketplace, GITHUB_TOKEN, gh workflow