Allow callers to control workflow permissions
This commit is contained in:
5
.github/workflows/build-and-upload.yml
vendored
5
.github/workflows/build-and-upload.yml
vendored
@@ -29,9 +29,8 @@ on:
|
|||||||
default: true
|
default: true
|
||||||
type: boolean
|
type: boolean
|
||||||
|
|
||||||
permissions:
|
# Permissions are intentionally omitted here so callers can choose
|
||||||
id-token: write
|
# least-privilege (e.g. dev CI uses read-only; releases grant write).
|
||||||
contents: write
|
|
||||||
|
|
||||||
env:
|
env:
|
||||||
NODE_VERSION: 20
|
NODE_VERSION: 20
|
||||||
|
|||||||
Reference in New Issue
Block a user