Slot: job_permissions

The access the job’s own permissions key gives its GITHUB_TOKEN, in place of the workflow’s. A called workflow can lower its token’s access, never raise it.

URI: gha:job_permissions

Applicable Classes

Name	Description	Modifies Slot
GhaWorkflowJob	A job under a workflow’s jobs key: steps that run on a runner, or a call to…	no

Properties

Type and Range

Property	Value
Range	GhaPermission
Domain Of	GhaWorkflowJob

Cardinality and Requirements

Property	Value
Multivalued	Yes

Slot Characteristics

Property	Value
Owner	GhaWorkflowJob

See Also

• https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idpermissions

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/github-actions

Mappings

Mapping Type	Mapped Value
self	gha:job_permissions
native	gha:job_permissions

LinkML Source

name: job_permissions
description: The access the job's own `permissions` key gives its GITHUB_TOKEN, in
  place of the workflow's. A called workflow can lower its token's access, never raise
  it.
from_schema: https://w3id.org/lmodel/github-actions
see_also:
- https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idpermissions
rank: 1000
owner: GhaWorkflowJob
domain_of:
- GhaWorkflowJob
range: gha_permission
multivalued: true