[StepSecurity] ci: Harden GitHub Actions (#56)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
intel · Jun 18, 2024 · 0481b14 · 0481b14
1 parent b35e8c7
commit 0481b14
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -5,8 +5,13 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   release:
+    permissions:
+      contents: write  # for helm/chart-releaser-action to push chart release and create a release
     runs-on: ubuntu-latest
     steps:
       - name: Checkout