Permission tokens

coatless-quarto · Oct 20, 2024 · e169553 · e169553
1 parent 3a0e464
commit e169553
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
@@ -12,10 +12,13 @@ jobs:
         runs-on: ubuntu-latest
         # Only restrict concurrency for non-PR jobs
         concurrency:
-          group: quarto-publish-${{ github.event_name != 'pull_request' || github.run_id }}
+            group: quarto-publish-${{ github.event_name != 'pull_request' || github.run_id }}
         permissions:
-          contents: write
+            contents: read
+            pages: write
+            id-token: write
         steps:
+
         - name: "Check out repository"
           uses: actions/checkout@v4