ci: update permissions

Dokuqui · Feb 18, 2024 · b7f1f3a · b7f1f3a
1 parent ef8ad42
commit b7f1f3a
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -9,7 +9,12 @@ on:
     branches: [ main ]
 
 permissions:
+  pull-requests: write
+  issues: write
+  repository-projects: write
   packages: write
+  id-token: write
+  contents: write
 
 jobs:
   lint:
@@ -27,7 +32,7 @@ jobs:
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: master
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PERSO_GITHUB }}
           VALIDATE_JSCPD: false
           VALIDATE_TYPESCRIPT_STANDARD: false
           VALIDATE_MARKDOWN: false
@@ -95,13 +100,13 @@ jobs:
     needs: 
       - lint
       - test
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v4
         with:
           node-version: '20.11.1'
       - name: Run Semantic-Release
         run: npx semantic-release --debug
+        env:
+          GITHUB_TOKEN: ${{ secrets.PERSO_GITHUB }}
+          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}