update ci workflow permissions

mauwii · Sep 30, 2023 · 7dd530a · 7dd530a
1 parent 1292d9a
commit 7dd530a
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -15,8 +15,6 @@ on:
 
 permissions:
   contents: read
-  packages: write
-  pull-requests: write
 
 env:
   REGISTRY: ${{ (vars.DOCKERHUB_USERNAME != '' && secrets.DOCKERHUB_TOKEN != '') && 'docker.io' || 'ghcr.io' }}
@@ -70,6 +68,11 @@ jobs:
   build:
     needs: test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      pull-requests: write
+      security-events: write
     strategy:
       matrix:
         targets: ${{ fromJson(needs.test.outputs.targets) }}