Merge pull request #4 from solidDoWant/deploy-minimum-perms

Set only required token permissions for container image publishing
kashalls · Dec 15, 2023 · f71f218 · f71f218
2 parents 710d504 + 3cfbbe3
commit f71f218
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/container-ci.yaml b/.github/workflows/container-ci.yaml
@@ -31,6 +31,10 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'push'
 
+    permissions:
+      contents: read
+      packages: write
+
     steps:
       - name: Checkout Project
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4