Update ci.yml

meshtastic · Jan 18, 2024 · a7f5e72 · a7f5e72
1 parent 07c1b21
commit a7f5e72
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -2,8 +2,6 @@ name: CI
 
 on: push
 
-permissions: write-all
-
 jobs:
   quality:
     runs-on: ubuntu-latest
@@ -22,6 +20,9 @@ jobs:
         run: biome ci .
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout code & submodules
         uses: actions/checkout@v4
@@ -45,4 +46,4 @@ jobs:
       - name: "Publish to NPM"
         uses: JS-DevTools/npm-publish@v3
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}