Try to rework permissions to leave top level read, but pass write to …

…build-base.
AntelopeIO · Jul 12, 2023 · 495d6ea · 495d6ea
1 parent e0b3caa
commit 495d6ea
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -23,7 +23,7 @@ on:
         type: string
 
 permissions:
-  packages: write
+  packages: read
   contents: read
 
 defaults:
@@ -33,6 +33,9 @@ defaults:
 jobs:
   build-base:
     uses: .github/workflows/build_base.yaml
+    permissions:
+      packages: write
+      contents: read
 
   v:
     name: Discover Versions

diff --git a/.github/workflows/ph_backward_compatibility.yaml b/.github/workflows/ph_backward_compatibility.yaml
@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  packages: write
+  packages: read
   contents: read
 
 defaults:
@@ -14,6 +14,9 @@ defaults:
 jobs:
   build-base:
     uses: .github/workflows/build_base.yaml
+    permissions:
+      packages: read
+      contents: read
 
   tests:
     name: Tests