From 1854238d2d824e7a5504f3b9cca4937069e4b5f7 Mon Sep 17 00:00:00 2001
From: Seth Vargo <seth@sethvargo.com>
Date: Wed, 22 Sep 2021 21:31:59 -0400
Subject: [PATCH] Add a note about overriding default permissions

Fixes GH-12
---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index aab1211..f06affd 100644
--- a/README.md
+++ b/README.md
@@ -53,6 +53,9 @@ jobs:
           --header "Authorization: Bearer ${{ steps.auth.outputs.access_token }}"
 ```
 
+Note that changing the `permissions` block may remove some default permissions.
+See the [permissions documentation][github-perms] for more information.
+
 See [Examples](#examples) for more examples.
 
 
@@ -426,3 +429,4 @@ Here is a sample GitHub Token for reference for attribute mappings:
 [wif]: https://cloud.google.com/iam/docs/workload-identity-federation
 [gcloud]: https://cloud.google.com/sdk
 [map-external]: https://cloud.google.com/iam/docs/access-resources-oidc#impersonate
+[github-perms]: https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions#permissions