Add permissions for reading contents and writing packages in workflows

Signed-off-by: Anton Engelhardt <[email protected]>
antonengelhardt · Feb 9, 2024 · a39848e · a39848e
1 parent 258d957
commit a39848e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -75,6 +75,9 @@ jobs:
 
   ghcr-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
       - name: Checkout code

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -51,6 +51,9 @@ jobs:
 
   ghcr-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
       - name: Checkout code
@@ -72,3 +75,4 @@ jobs:
         run:
           docker build -t ghcr.io/antonengelhardt/wasm-oidc-plugin:${{ env.VERSION }} .
           docker push ghcr.io/antonengelhardt/wasm-oidc-plugin:${{ env.VERSION }}
+