Commit e96d9d3
committed
CI: remove unused "permissions: packages: write"
The option "permissions: packages: write" was used to enable NuGet
repository for vcpkg caching, but eventually this caching method
was not used due to my security concerns of cache poisoning. It's
unclear whether a third-party contributor can write arbitrary
packages to the NuGet repository. Thus, regular GitHub file caching
via "actions/cache" was used (which is isolated per branch, by
default, it's not possible to overwrite the trusted "master" branch
caching just by opening a PR).
Remove unused "permissions: packages: write".
Signed-off-by: Yifeng Li <tomli@tomli.me>1 parent 2db2f8b commit e96d9d3
1 file changed
Lines changed: 0 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
815 | 815 | | |
816 | 816 | | |
817 | 817 | | |
818 | | - | |
819 | | - | |
820 | | - | |
821 | | - | |
822 | 818 | | |
823 | 819 | | |
824 | 820 | | |
| |||
0 commit comments