Document action.inputs.token

Author: jsoref

analyze/action.yml

@@ -69,6 +69,8 @@ inputs:
     required: true
     default: "true"
   token:
+    description: "Token for accessing /code-scanning/analysis endpoints (used by `upload-database` and `upload`)"
+    required: false
     default: ${{ github.token }}
   matrix:
     default: ${{ toJson(matrix) }}

autobuild/action.yml

@@ -3,6 +3,7 @@ description: 'Attempt to automatically build code'
 author: 'GitHub'
 inputs:
   token:
+    description: "Token for accessing /code-scanning/analysis endpoints (used to for status reporting)"
     default: ${{ github.token }}
   matrix:
     default: ${{ toJson(matrix) }}

resolve-environment/action.yml

@@ -3,6 +3,7 @@ description: '[Experimental] Attempt to infer a build environment suitable for a
 author: 'GitHub'
 inputs:
   token:
+    description: "Token for accessing /code-scanning/analysis endpoints (used for ???)"
     default: ${{ github.token }}
   matrix:
     default: ${{ toJson(matrix) }}

upload-sarif/action.yml

@@ -20,6 +20,7 @@ inputs:
     description: "The sha of the HEAD of the ref where results will be uploaded. If not provided, the Action will use the GITHUB_SHA environment variable. If provided, the ref input must be provided as well. This input is ignored for pull requests from forks."
     required: false
   token:
+    description: "Token for accessing /code-scanning/analysis endpoints (used to publish sarif -- generally requires `security-events: write`)"
     default: ${{ github.token }}
   matrix:
     default: ${{ toJson(matrix) }}