From f73a03599b85635be77db5f08d71fa06e6608643 Mon Sep 17 00:00:00 2001 From: Chris Gianelloni Date: Wed, 11 Dec 2024 09:35:47 -0500 Subject: [PATCH] ci: include more explicit permissions, not fewer Signed-off-by: Chris Gianelloni --- .github/workflows/publish.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 50531aa..8a02b04 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -46,7 +46,13 @@ jobs: runs-on: ubuntu-latest needs: [create-draft-release] permissions: + actions: write + attestations: write + checks: write + contents: write id-token: write + packages: write + statuses: write steps: - run: "echo \"RELEASE_TAG=${GITHUB_REF#refs/tags/}\" >> $GITHUB_ENV" - uses: actions/checkout@v4 @@ -79,7 +85,13 @@ jobs: runs-on: ubuntu-latest needs: [create-draft-release] permissions: + actions: write + attestations: write + checks: write + contents: write id-token: write + packages: write + statuses: write steps: - run: "echo \"RELEASE_TAG=${GITHUB_REF#refs/tags/}\" >> $GITHUB_ENV" - uses: actions/checkout@v4