build: harden release.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
remy · Sep 25, 2022 · 296410a · 296410a
1 parent 924e038
commit 296410a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,8 +8,12 @@ on:
   push:
     branches:
       - main
+permissions: {}
 jobs:
   release:
+    permissions:
+      contents: write # for release publishing
+
     name: Release
     runs-on: ubuntu-18.04
     steps: