fix: add explicit permissions to CI.yml (#755)

* chore: add explicit permissions to CI.yml now that we have moved to enterprise * using permissions from semantic-release example * remove contents:write as it is thought to be for github packages
guardian · May 26, 2023 · f692a4d · f692a4d · github-actions · May 26, 2023
1 parent b4edc70
commit f692a4d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
@@ -120,6 +120,9 @@ jobs:
     needs: [build, test-e2e, test-unit, lint, types]
     if: github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     steps:
       - name: Checkout
         uses: actions/checkout@v3