From 66840752d3dae62f140001e7e65cd58140738248 Mon Sep 17 00:00:00 2001 From: Matan Borenkraout Date: Sat, 13 Dec 2025 22:32:33 +0200 Subject: [PATCH] chore: fix action permissions --- .github/workflows/release.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 351469bd..8c6b417e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,15 +16,12 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true -permissions: - id-token: write # to enable use of OIDC (npm trusted publishing and provenance) - actions: write # to cancel/stop running workflows (styfle/cancel-workflow-action) - contents: read # to fetch code (actions/checkout) - issues: write # to be able to comment on released issues - pull-requests: write # to be able to comment on released pull requests +permissions: {} jobs: validate: + permissions: + contents: read # to fetch code (actions/checkout) continue-on-error: ${{ matrix.react != 'latest' }} # ignore all-contributors PRs if: ${{ !contains(github.head_ref, 'all-contributors') }} @@ -75,9 +72,11 @@ jobs: release: permissions: + id-token: write # to enable use of OIDC (npm trusted publishing and provenance) actions: write # to cancel/stop running workflows (styfle/cancel-workflow-action) contents: write # to create release tags (cycjimmy/semantic-release-action) issues: write # to post release that resolves an issue (cycjimmy/semantic-release-action) + pull-requests: write # to be able to comment on released pull requests needs: validate runs-on: ubuntu-latest