add read permission; edit message

Author: DarianM

.github/scripts/check-deploy-permissions.ts

@@ -89,7 +89,7 @@ async function skipDeployment(coreApi: AsyncFunctionArguments['core'], reason: s
       'Security Notice',
       `Deployments are restricted to organization members, collaborators, and repository owners.
       External contributors can still run builds and tests.
-      Maintainers can trigger deployments by commenting "ok-to-deploy" on the pull request.`
+      Maintainers can trigger deployments by adding a regular PR comment with "ok-to-deploy" exactly.`
     )
     .write();
 }

.github/workflows/deploy.yml

@@ -15,6 +15,8 @@ defaults:
 
 permissions:
   pull-requests: write
+  issues: read
+  contents: read
 
 jobs:
   check-permissions:

README.md

@@ -115,7 +115,7 @@ pnpm -C localenv/s3 dev
 
 ### How to Run Preview Changes
 
-For a pull request, **external contributors** (those without write access to the repository), deployment previews are not automatically. However, user with write access to repository can trigger the workflow **preview deployments** by adding a review-comment with body `ok-to-deploy` exactly.
+For a pull request, **external contributors** (those without write access to the repository), deployment previews are not triggered automatically. However, users with write access to the repository can trigger **preview deployments** by adding a regular PR comment with `ok-to-deploy` exactly.
 This will trigger the deploy workflow and create preview environments for the PR.
 
 ## Technology Stack