chore: improve permissions for release workflow

eclipse-csi · Oct 26, 2024 · f07e339 · f07e339
1 parent 28cb7f4
commit f07e339
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -23,15 +23,16 @@ env:
   IMAGE_NAME: ${{ github.repository }}
   PYTHON_VERSION: '3.11'
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: false
 
 jobs:
   precheck:
     runs-on: ubuntu-22.04
-    permissions:
-      contents: write
     if: github.repository == 'eclipse-csi/otterdog'
     steps:
       - name: Check ref
@@ -115,7 +116,6 @@ jobs:
     runs-on: ubuntu-22.04
     needs: ['release']
     permissions:
-      contents: read
       packages: write
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
@@ -155,7 +155,6 @@ jobs:
       name: pypi
       url: https://pypi.org/p/otterdog
     permissions:
-      contents: read
       id-token: write
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1