ci: fix packages permissions (#6948)

* ci: fix packages permissions Signed-off-by: moabu <47318409+moabu@users.noreply.github.com> * ci: fix packages permissions Signed-off-by: moabu <47318409+moabu@users.noreply.github.com> --------- Signed-off-by: moabu <47318409+moabu@users.noreply.github.com>
JanssenProject · Dec 5, 2023 · f0859f9 · f0859f9
1 parent 74f57a0
commit f0859f9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
@@ -4,15 +4,18 @@ on:
     types: [closed, labeled]
     branches: [main, release-*]
 permissions:
-  contents: write # so it can comment
-  pull-requests: write # so it can create pull requests
+  contents: read
+  pull-requests: read
 # WARNING:
 # When extending this action, be aware that $GITHUB_TOKEN allows write access to
 # the GitHub repository. This means that it should not evaluate user input in a
 # way that allows code injection.
 
 jobs:
   backport:
+    permissions:
+      contents: write # so it can comment
+      pull-requests: write # so it can create pull requests
     name: Backport Pull Request
     # Run the action if a PR is merged with backport labels
     # OR

diff --git a/.github/workflows/docker_build_image.yml b/.github/workflows/docker_build_image.yml
@@ -43,6 +43,8 @@ permissions:
 
 jobs:
   docker:
+    permissions:
+      packages: write
     runs-on: ubuntu-latest
     strategy:
       max-parallel: 8