SONAR-23539 fix missing permissions

SonarSource · Nov 6, 2024 · aa596de · aa596de
1 parent a364b53
commit aa596de
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/.github/workflows/release-template.yml b/.github/workflows/release-template.yml
@@ -11,9 +11,6 @@ jobs:
   release:
     name: Upload Release Asset
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write
     steps:
       - id: secrets
         uses: SonarSource/[email protected]

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,6 +9,9 @@ jobs:
   release-9-x:
     name: Upload Release Assets for 9-X releases
     if: contains(github.event.release.name, '9.')
+    permissions:
+      contents: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -24,6 +27,9 @@ jobs:
   release-10-x:
     name: Upload Release Assets for 10-X releases
     if: contains(github.event.release.name, '10.')
+    permissions:
+      contents: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -38,6 +44,9 @@ jobs:
   release-community-build:
     name: Upload Release Assets for community-build release
     if: contains(github.event.release.name, 'Community Build')
+    permissions:
+      contents: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix: