Skip to content

Commit 0d31ac8

Browse files
authored
workflows: Remove top-level permissions from release-tasks.yml (#91088)
This is the recommend best practice and we also don't need write access for all jobs.
1 parent e069bb7 commit 0d31ac8

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

.github/workflows/release-tasks.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
name: Release Task
22

33
permissions:
4-
contents: write
4+
contents: read
55

66
on:
77
push:
@@ -27,6 +27,8 @@ jobs:
2727
release-create:
2828
name: Create a New Release
2929
runs-on: ubuntu-latest
30+
permissions:
31+
contents: write # For creating the release.
3032
needs: validate-tag
3133

3234
steps:
@@ -55,6 +57,8 @@ jobs:
5557

5658
release-doxygen:
5759
name: Build and Upload Release Doxygen
60+
permissions:
61+
contents: write
5862
needs:
5963
- validate-tag
6064
- release-create
@@ -72,6 +76,8 @@ jobs:
7276

7377
release-binaries:
7478
name: Build Release Binaries
79+
permissions:
80+
contents: write
7581
needs:
7682
- validate-tag
7783
- release-create

0 commit comments

Comments
 (0)