Added permissions to GitHub Action

gumbo-millennium · Nov 24, 2023 · 15c05c0 · 15c05c0
1 parent 7969c32
commit 15c05c0
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/.github/workflows/verify-and-build.yml b/.github/workflows/verify-and-build.yml
@@ -18,6 +18,10 @@ jobs:
     name: Build application
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      packages: read
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -29,7 +33,7 @@ jobs:
           cache: 'npm'
 
       - name: Authenticate against GitHub Packages registry
-        run: echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" >> ~/.npmrc
+        run: echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" >> .npmrc
 
       - name: Install dependencies
         run: npm clean-install
@@ -65,6 +69,9 @@ jobs:
     needs:
       - test-and-build
 
+    permissions:
+      contents: write
+
     steps:
       - name: Download static application
         uses: actions/download-artifact@v3
@@ -91,6 +98,10 @@ jobs:
     needs:
       - test-and-build
 
+    permissions:
+      contents: read
+      packages: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4