Update release.yaml - openssf scorecard write permissions at the job …

…level (#87) Signed-off-by: Mathieu Benoit <mathieu-benoit@hotmail.fr>
score-spec · Nov 21, 2024 · 70df937 · 70df937
1 parent 526ed3b
commit 70df937
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -4,12 +4,14 @@ on:
     tags:
       - 0.**
 permissions:
-  id-token: write
-  packages: write
-  contents: write
+  contents: read
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      packages: write
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4