Allow callers to control workflow permissions

This commit is contained in:
Shantur Rathore
2026-01-06 20:32:29 +00:00
parent ac8dfcc607
commit fa308696b4

View File

@@ -29,9 +29,8 @@ on:
default: true default: true
type: boolean type: boolean
permissions: # Permissions are intentionally omitted here so callers can choose
id-token: write # least-privilege (e.g. dev CI uses read-only; releases grant write).
contents: write
env: env:
NODE_VERSION: 20 NODE_VERSION: 20