From 78d6777bfd798ae68942a479820b332895b409c2 Mon Sep 17 00:00:00 2001
From: Scott Leggett <scott@sl.id.au>
Date: Fri, 8 Dec 2023 14:49:47 +0800
Subject: [PATCH] fix: release action permissions

---
 .github/workflows/release.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index acd9252..28af7bc 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,6 +6,7 @@ on:
 jobs:
   tag:
     permissions:
+      # create tag
       contents: write
     runs-on: ubuntu-latest
     outputs:
@@ -39,7 +40,11 @@ jobs:
         fi
   release:
     permissions:
+      # create release
+      contents: write
+      # push docker images to regsitry
       packages: write
+      # use OIDC token for signing
       id-token: write
     needs: tag
     if: needs.tag.outputs.new-tag == 'true'