Added permissions to GitHub Action

gumbo-millennium · Nov 24, 2023 · b129f8f · b129f8f
1 parent 7969c32
commit b129f8f
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/verify-and-build.yml b/.github/workflows/verify-and-build.yml
@@ -13,6 +13,10 @@ env:
   DOCKER_REGISTRY: ghcr.io
   DOCKER_IMAGE_NAME: ${{ github.repository }}
 
+permissions:
+  contents: read
+  packages: read
+
 jobs:
   test-and-build:
     name: Build application
@@ -65,6 +69,9 @@ jobs:
     needs:
       - test-and-build
 
+    permissions:
+      contents: write
+
     steps:
       - name: Download static application
         uses: actions/download-artifact@v3
@@ -91,6 +98,10 @@ jobs:
     needs:
       - test-and-build
 
+    permissions:
+      contents: read
+      packages: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4