Declare write permissions only for jobs that require them

club-1 · Jul 28, 2024 · 7a42dd8 · 7a42dd8
1 parent 457e0ac
commit 7a42dd8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -152,6 +152,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: html
     concurrency: preview-${{ github.ref }}
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4

diff --git a/.github/workflows/clean.yml b/.github/workflows/clean.yml
@@ -12,6 +12,9 @@ concurrency: preview-${{ github.ref }}
 jobs:
   preview:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4