Set publish workflow permissions to read-all to fix CKV2_GHA_1: "…

…Ensure top-level permissions are not set to write-all" linter error.
tylermilner · Apr 8, 2024 · dd52c4e · dd52c4e
1 parent e156e7b
commit dd52c4e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -4,6 +4,8 @@ on:
   release:
     types: [published, edited]
 
+permissions: read-all
+
 jobs:
   publish:
     runs-on: ubuntu-latest