From 64517d184ca9e3766ece291454b2459e361027fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Th=C3=A9o=20FIDRY?= <theo.fidry@gmail.com>
Date: Tue, 21 Nov 2023 22:00:17 +0100
Subject: [PATCH] give perms only to the publish job

---
 .github/workflows/release.yaml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f687b848..c283ff71 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,9 +19,6 @@ env:
     DOCKERFILE: Dockerfile
     DOCKERHUB_USERNAME: humbugphp
 
-permissions:
-    contents: write
-
 jobs:
     build-phar:
         runs-on: ubuntu-latest
@@ -85,6 +82,8 @@ jobs:
         needs:
             - 'build-phar'
         if: github.event_name == 'release'
+        permissions:
+            contents: write
         steps:
             -   uses: actions/download-artifact@v3
                 with: