Final workspace permissions for CQL happiness (#3178)

earlephilhower · web-flow · commit e0f5522d78a8 · 2025-10-02T14:06:36.000-07:00
diff --git a/.github/workflows/release-to-publish.yml b/.github/workflows/release-to-publish.yml
@@ -1,5 +1,10 @@
 name: Arduino-Pico Release Publisher
 
+permissions:
+  actions: read
+  contents: read
+  packages: write
+
 on:
   release:
     types: [published]
diff --git a/.github/workflows/tag-to-draft-release.yml b/.github/workflows/tag-to-draft-release.yml
@@ -4,6 +4,11 @@
 
 name: Arduino-Pico Draft Release
 
+permissions:
+  actions: read
+  contents: read
+  packages: write
+
 on:
   push:
     tags:
