give perms only to the publish job

humbug · Nov 21, 2023 · 64517d1 · 64517d1
1 parent 7fb6ad6
commit 64517d1
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -19,9 +19,6 @@ env:
     DOCKERFILE: Dockerfile
     DOCKERHUB_USERNAME: humbugphp
 
-permissions:
-    contents: write
-
 jobs:
     build-phar:
         runs-on: ubuntu-latest
@@ -85,6 +82,8 @@ jobs:
         needs:
             - 'build-phar'
         if: github.event_name == 'release'
+        permissions:
+            contents: write
         steps:
             -   uses: actions/download-artifact@v3
                 with: