set write permission for upload job only

kruplm · Mar 21, 2024 · a926fd5 · a926fd5
1 parent 49fc43a
commit a926fd5
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ on:
  workflow_dispatch:
 
 permissions:
- contents: write
+ contents: read
  actions: read
 
 name: Release
@@ -19,7 +19,8 @@ jobs:
  name: Upload Release Asset
  needs: build
  runs-on: windows-latest
-
+ permissions:
+ contents: write
  steps:
 
  # Using shared artifact from build workflow
@@ -37,6 +38,7 @@ jobs:
  run: Compress-Archive -Path ${{ github.workspace }}/shell-binaries/* composeui-${{ github.ref_name }}-win32.zip
 
  - name: Upload Release Asset
+
  id: upload-release-asset 
  uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
  env: