Skip to content

Commit 17f3efa

Browse files
add contents read to build workflow call (#310)
1 parent 66d2a7c commit 17f3efa

File tree

1 file changed

+4
-6
lines changed

1 file changed

+4
-6
lines changed

.github/workflows/release.yml

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,9 @@ jobs:
2323
build:
2424
uses: ./.github/workflows/build.yml
2525
permissions:
26-
id-token: write
2726
attestations: write
27+
contents: read
28+
id-token: write
2829
with:
2930
version: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || '' }}
3031

@@ -40,12 +41,9 @@ jobs:
4041
needs: [build, test]
4142
environment: release
4243
permissions:
43-
# Use to sign the release artifacts
44-
id-token: write
45-
# Used to upload release artifacts
46-
contents: write
47-
# Used to generate artifact attestation
4844
attestations: write
45+
contents: write
46+
id-token: write
4947
steps:
5048
- uses: actions/checkout@v5
5149
with:

0 commit comments

Comments
 (0)