`actions: write` is too permissive

[avivkeller]

References

#1133 / #1131
nodejs/help#4396

Issue

Currently, the stale bot (and the runner in general) require actions: write permissions to modify existing caches but not to create new ones. If actions: write permissions aren't necessary to create caches, why are they needed to update them? Could a new cache: write permission be introduced for the runner?

[HarithaVattikuti]

Hello @redyetidev
Thank you for creating this issue. We will investigate it and get back to you as soon as we have some feedback.

[ericLemanissier]

@redyetidev you probably want to try my proposition from #1183.
For this, you can replace uses: actions/stale@...with uses: actions/stale@ericLemanissier/patch-2 and remove actions: write from https://github.com/nodejs/help/blob/main/.github/workflows/close-stale-issues.yml