| Scope | Why |
memberships.read | List the Cloudflare accounts you can access. |
workers-scripts.read | List the Worker scripts in your account. |
offline_access | Get a refresh token so the connection stays alive without re-auth. |
1wrangler deploy --tag $GITHUB_SHA
GITHUB_SHA automatically.release-abc123 or v1.2.3 are ignored.--tag commit SHA still show up as releases, but they won't be tied to a commit.