From c72cf479ec71968ca9bb19304c3cbb7d6c9acc60 Mon Sep 17 00:00:00 2001
From: Sina Madani <sina.madani@vonage.com>
Date: Tue, 6 Aug 2024 16:50:01 +0100
Subject: [PATCH] ci: Update permissions

---
 .github/workflows/build.yml   | 2 +-
 .github/workflows/publish.yml | 4 ++--
 pom.xml                       | 3 +--
 3 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1eec001..eed8c75 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -10,7 +10,7 @@ permissions:
   checks: write
   contents: read
   deployments: none
-  issues: write
+  issues: read
   discussions: none
   packages: none
   pages: read
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index fb17a21..3c9a1f9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -9,11 +9,11 @@ permissions:
   contents: read
   deployments: read
   issues: write
-  discussions: write
+  discussions: none
   packages: write
   pages: write
   pull-requests: read
-  security-events: write
+  security-events: read
   statuses: write
 
 jobs:
diff --git a/pom.xml b/pom.xml
index 859036c..0516061 100644
--- a/pom.xml
+++ b/pom.xml
@@ -40,7 +40,6 @@
   </issueManagement>
 
   <properties>
-    <nexusUrl>https://oss.sonatype.org</nexusUrl>
     <project.scm.connection>scm:git@github.com:Vonage/vonage-kotlin-sdk</project.scm.connection>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
@@ -270,7 +269,7 @@
             <extensions>true</extensions>
             <configuration>
               <serverId>nexus-releases</serverId>
-              <nexusUrl>${nexusUrl}</nexusUrl>
+              <nexusUrl>https://oss.sonatype.org</nexusUrl>
               <autoReleaseAfterClose>true</autoReleaseAfterClose>
             </configuration>
           </plugin>