mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-08-24 11:43:50 -05:00
The job pushes with the SSH deploy key configured by actions/checkout's ssh-key input, so GITHUB_TOKEN is never used for writes. Scope it down to contents: read.