From 48baa6e5e03581cba39646cbba4d1a268b2941e4 Mon Sep 17 00:00:00 2001
From: Maarten de Kruijf <maarten.dekruijf@tno.nl>
Date: Wed, 6 Mar 2024 15:10:46 +0100
Subject: [PATCH] Set token permission

---
 .github/workflows/hugo.yaml | 34 +++++-----------------------------
 1 file changed, 5 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/hugo.yaml b/.github/workflows/hugo.yaml
index 753fa905..eb1b32aa 100644
--- a/.github/workflows/hugo.yaml
+++ b/.github/workflows/hugo.yaml
@@ -10,36 +10,12 @@ on:
     branches:
       - master
 
-# jobs:
-#   deploy:
-#     env:
-#       HUGO_VERSION: 0.123.7
-#     runs-on: ubuntu-22.04
-#     concurrency:
-#       group: ${{ github.workflow }}-${{ github.ref }}
-#     steps:
-#       - uses: actions/checkout@v4
-#         with:
-#           submodules: true  # Fetch Hugo themes (true OR recursive)
-#           fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
 
-#       - name: Setup Hugo
-#         uses: peaceiris/actions-hugo@v2
-#         with:
-#           hugo-version: ${HUGO_VERSION}
-#           # extended: true
-
-#       - name: Build
-#         run: hugo --minify
-
-#       - name: Deploy
-#         uses: peaceiris/actions-gh-pages@v3
-#         with:
-#           github_token: ${{ secrets.GITHUB_TOKEN }}
-#           publish_dir: ./public
-
-# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
-# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
 concurrency:
   group: "pages"
   cancel-in-progress: false