GitHub Actions Permissions

This short note documents important wrong default in GitHub Actions, which should be corrected for much better contribution experience.

Under Settings Actions General there’s this setting (default pictured):

To save your contributors quite a bit of frustration, you want to flip it to this instead:

Obviously, the first best solution here is for GitHub itself to change the default.