set write permission for upload job only

kruplm · Mar 21, 2024 · a926fd5 · a926fd5
1 parent 49fc43a
commit a926fd5
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
   actions: read
 
 name: Release
@@ -19,7 +19,8 @@ jobs:
     name: Upload Release Asset
     needs: build
     runs-on: windows-latest
-
+    permissions:
+      contents: write
     steps:
 
       # Using shared artifact from build workflow
@@ -37,6 +38,7 @@ jobs:
         run: Compress-Archive -Path  ${{ github.workspace }}/shell-binaries/* composeui-${{ github.ref_name }}-win32.zip
 
       - name: Upload Release Asset
+
         id: upload-release-asset 
         uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
         env: