Restrict permissions for the GITHUB_TOKEN in .github/workflows/build.…

…yml (#20) Co-authored-by: Step Security <[email protected]>
mgdm · Sep 15, 2021 · 28adf17 · 28adf17
1 parent 8d2300f
commit 28adf17
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -6,6 +6,8 @@ on:
 
 jobs:
   release:
+    permissions:
+      contents: write
     runs-on: ${{ matrix.os }}
     strategy:
       matrix: