ci(release): add permission for OIDC

ryanccn · ryanccn · commit 9509d104c4ed · 2025-09-21T21:32:14.000+08:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,8 +8,7 @@ on:
   push:
     tags: ["v*.*.*"]
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   build:
@@ -20,6 +19,9 @@ jobs:
       disable-cache: true
 
   publish:
+    permissions:
+      contents: read
+      id-token: write
     needs: ["build"]
     runs-on: macos-latest
 
