From 036546c90e67c12c3726c249ccfe6efcc7b80d3a Mon Sep 17 00:00:00 2001 From: lichao127 Date: Fri, 26 Jul 2024 15:03:50 -0700 Subject: [PATCH] rephrase best practice --- docs/concepts-guidelines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/concepts-guidelines.md b/docs/concepts-guidelines.md index 058fc87..b32ac22 100644 --- a/docs/concepts-guidelines.md +++ b/docs/concepts-guidelines.md @@ -166,7 +166,7 @@ Alternatively, use the action directly and reference the commit hash for the ver This action uses [ncc](https://github.com/vercel/ncc) to compile the Node.js code and dependencies into a single JavaScript file under the [dist](https://github.com/peter-evans/create-pull-request/tree/main/dist) directory. -A best security practice is to assign the least permission required for your workflow (the principle of least privilege). +A security best practice is to assign the least permission required for your workflow (the principle of least privilege). Refer to [Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs#defining-access-for-the-github_token-permissions). ```yaml