1
0
mirror of synced 2026-01-10 18:02:53 -05:00

Merge pull request #32467 from github/repo-sync

Repo sync
This commit is contained in:
docs-bot
2024-04-10 18:32:01 -04:00
committed by GitHub
3 changed files with 3 additions and 1 deletions

View File

@@ -142,6 +142,7 @@ If you publish a package that is linked to a repository, {% data variables.produ
**Notes:**
- Syncing your package with a repository {% data variables.package_registry.package-settings-actions-access-menu %} is different than connecting your package to a repository. For more information about linking a repository to your package, see "[AUTOTITLE](/packages/learn-github-packages/connecting-a-repository-to-a-package)."
- You can choose to limit permissions to workflow jobs usings the `permissions` key and `packages` scope. For more information, see "[AUTOTITLE](/actions/using-jobs/assigning-permissions-to-jobs)."
- {% data reusables.package_registry.public-forks-private-packages %}
{% endnote %}

View File

@@ -72,7 +72,7 @@ These are more examples of how default permissions work for workflows that manag
| {% data variables.product.prodname_actions %} workflow task | Default permissions and access |
|----|----|
| Download an existing | - If the package is public, any workflow running in any repository can download the package. <br> - If the package is internal, then all workflows running in any repository owned by the Enterprise account can download the package. For enterprise-owned organizations, you can read any repository in the enterprise <br> - If the package is private, only workflows running in repositories that are given read permission on that package can download the package. <br>
| Download an existing | - If the package is public, any workflow running in any repository can download the package. <br> - If the package is internal, then all workflows running in any repository owned by the Enterprise account can download the package. For enterprise-owned organizations, you can read any repository in the enterprise <br> - If the package is private, only workflows running in repositories that are given read permission on that package can download the package. {% data reusables.package_registry.public-forks-private-packages %} <br>
| Upload a new version to an existing package | - If the package is private, internal, or public, only workflows running in repositories that are given write permission on that package can upload new versions to the package.
| Delete a package or versions of a package | - If the package is private, internal, or public, only workflows running in repositories that are given admin permission can delete existing versions of the package.

View File

@@ -0,0 +1 @@
If you grant a public repository access to private packages, forks of the repository may be able to access the private packages.