u

Author: Boshen

.github/workflows/ci.yml

@@ -8,16 +8,22 @@ on:
 
 jobs:
   test-lint-build:
+    permissions:
+      contents: read
+      packages: read
+
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node.js LTS
         uses: actions/setup-node@v4
         with:
           node-version: 'lts/*'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -26,6 +32,8 @@ jobs:
         shell: bash
         run: |
           echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup pnpm cache
         uses: actions/cache@v4