build: harden release.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
ardatan · Sep 25, 2022 · 7e23ae6 · 7e23ae6
1 parent 0f98fd3
commit 7e23ae6
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,8 +4,12 @@ on:
     branches:
       - master
 
+permissions: {}
 jobs:
   stable:
+    permissions:
+      contents: write # to create release
+
     uses: the-guild-org/shared-config/.github/workflows/release-stable.yml@main
     with:
       releaseScript: release