NO-ISSUE Grant minimum permission for publish

Author: Yang-33

.github/workflows/deploy-doc.yml

@@ -4,18 +4,17 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
 concurrency:
   group: pages
   cancel-in-progress: false
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pages: write
+      issues: write
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
@@ -61,6 +60,10 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     needs: [build]
     runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+      issues: write
     name: Deploy
     steps:
       - name: Deploy to GitHub Pages

.github/workflows/release.yml

@@ -10,12 +10,11 @@ on:
 
 jobs:
   release-package:
+    runs-on: ubuntu-latest
     permissions:
       contents: read
       id-token: write
       issues: write
-
-    runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     # Setup .npmrc file to publish to GitHub Packages