chore(build): restrict permissions of OAS publish job

eclipse-tractusx · Mar 26, 2024 · b992e2e · b992e2e
1 parent 80e1d28
commit b992e2e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.github/workflows/publish-new-release.yml b/.github/workflows/publish-new-release.yml
@@ -244,7 +244,9 @@ jobs:
   publish-to-swaggerhub:
     name: "Publish OpenAPI spec to Swaggerhub"
     permissions:
-      contents: read
+      contents: write
+      packages: write
+      pages: write
     needs: [ release-version ]
     uses: ./.github/workflows/publish-openapi.yaml
     secrets: inherit
diff --git a/.github/workflows/publish-openapi.yaml b/.github/workflows/publish-openapi.yaml
@@ -6,7 +6,10 @@ on:
     branches:
       - main
 
-permissions: write-all
+permissions:
+  contents: write
+  packages: write
+  pages: write
 
 jobs:
   publish: