ci: modify workflow permissions

Signed-off-by: r3drun3 <[email protected]>
stackzoo · Jan 31, 2024 · 1209c16 · 1209c16
1 parent 064433f
commit 1209c16
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -5,10 +5,8 @@ on:
     tags:
       - 'v*.*.*'
 
-permissions:
-  contents: write
-  # packages: write
-  # issues: write
+permissions: 
+  contents: read
 
 jobs:
   releaser:
@@ -22,7 +20,9 @@ jobs:
 
   build-and-publish-oci:
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions:
+      contents: read
+      packages: write
 
     steps:
       - name: Checkout Repository
@@ -53,4 +53,4 @@ jobs:
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
       - name: Push the OCI Image
-        run: docker push ghcr.io/${{ steps.lowercase.outputs.name }}:${{ steps.tagger.outputs.version-without-v }}
+        run: docker push ghcr.io/${{ steps.lowercase.outputs.name }}:${{ steps.tagger.outputs.version-without-v }}