Fix permissions set on docker build/publish and align with main & rel…

…ease workflows
kafbat · Jun 21, 2024 · fb8c8bf · fb8c8bf
1 parent f2a6504
commit fb8c8bf
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 7 deletions.
diff --git a/.github/workflows/docker_build.yml b/.github/workflows/docker_build.yml
@@ -12,7 +12,6 @@ on:
 
 permissions:
   contents: read
-  packages: write
 
 jobs:
   build:

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
@@ -11,6 +11,9 @@ on:
         required: true
         type: string        
 
+permissions:
+  packages: write
+
 jobs:
   deploy:
     continue-on-error: true

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -51,7 +51,6 @@ jobs:
     needs: jar-build
     permissions:
       contents: read
-      packages: write
     uses: ./.github/workflows/docker_build.yml
     secrets: inherit
     with:
@@ -61,8 +60,6 @@ jobs:
   docker-deploy: 
     needs: [jar-build, docker-build]
     permissions:
-      contents: read # To read secrets
-      id-token: write # This is required for requesting the JWT
       packages: write
     uses: ./.github/workflows/docker_publish.yml
     secrets: inherit

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -57,7 +57,6 @@ jobs:
     needs: release
     permissions:
       contents: read
-      packages: write
     uses: ./.github/workflows/docker_build.yml
     secrets: inherit
     with:
@@ -67,8 +66,6 @@ jobs:
   docker-deploy:
     needs: [release, docker-build]
     permissions:
-      contents: read # To read secrets
-      id-token: write # This is required for requesting the JWT
       packages: write
     uses: ./.github/workflows/docker_publish.yml
     secrets: inherit