Update usage directions to explicitly state permissions needed (#856)

This commit is contained in:
Natalie Somersall 2025-05-25 15:53:31 -06:00 committed by GitHub
parent 5d6a31931f
commit c9983513df
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -109,6 +109,9 @@ zizmor --offline workflow.yml
# passing a token explicitly will enable online mode
zizmor --gh-token ghp-... workflow.yml
# use the [GitHub CLI](https://cli.github.com/) token instead of a long-lived PAT
zizmor --gh-token $(gh auth token) workflow.yml
# online for the purpose of fetching the input (example/example),
# but all audits themselves are offline
zizmor --no-online-audits --gh-token ghp-... example/example