ci: update GITHUB_TOKEN permissions (#106)

lytovka · Oct 16, 2023 · 1a8e086 · 1a8e086
1 parent 082acbd
commit 1a8e086
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 5 deletions.
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
@@ -2,7 +2,7 @@ name: Pull Request
 on: pull_request
 jobs:
   lint:
-    name: ESLint
+    name: ⚒️ ESLint
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
@@ -19,7 +19,7 @@ jobs:
         run: npm run lint
 
   prettier:
-    name: Prettier
+    name: 💅 Prettier
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
@@ -36,7 +36,7 @@ jobs:
         run: npm run format:check
 
   build:
-    name: Build
+    name: 🚧 Build
     runs-on: ubuntu-latest
     strategy:
       matrix:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -3,15 +3,19 @@ on: workflow_dispatch
 
 jobs:
   release:
+    name: 📦 Release package
     runs-on: ubuntu-latest
     concurrency:
       group: ${{ github.workflow }}-release
       cancel-in-progress: true
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      id-token: write
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GH_TOKEN_SEMANTIC_RELEASE }}
       - name: Get Node.js version from .nvmrc
         run: echo NVMRC=`cat .nvmrc` >> $GITHUB_ENV
       - name: Setup Node.js