fix permissions for publishing job

smithy-security · May 5, 2024 · 35ee8a4 · 35ee8a4
1 parent 53d566c
commit 35ee8a4
Showing 1 changed file with 2 additions and 7 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -6,19 +6,14 @@ on:
 
 permissions:
   # Grant the ability to checkout the repository
-  contents: read
+  contents: write
+  # Grant the ability to push packages
   packages: write
 
 jobs:
   publish-docker-images:
     name: Push Docker images
     runs-on: ubuntu-latest
-    permissions:
-      # Grant the ability to write to GitHub Packages (push Docker images to
-      # GitHub Container Registry).
-      packages: write
-      # Grant the ability to checkout the repository.
-      contents: write
     steps:
       - name: Check out code
         uses: actions/checkout@v2