Update release.yaml - openssf scorecard write permissions at the job …

…level Signed-off-by: Mathieu Benoit <[email protected]>
score-spec · Nov 21, 2024 · 065c524 · 065c524
1 parent 526ed3b
commit 065c524
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -4,12 +4,14 @@ on:
     tags:
       - 0.**
 permissions:
-  id-token: write
-  packages: write
-  contents: write
+  contents: read
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      packages: write
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4