From b6bb26f7c263ced7d1154f9c54ce5998eaf8c60b Mon Sep 17 00:00:00 2001 From: Yoan Blanc Date: Mon, 5 May 2025 08:16:17 +0200 Subject: [PATCH] fix(ci): github token permissions Signed-off-by: Yoan Blanc --- .github/workflows/golangci.yml | 4 ++++ .github/workflows/release.yml | 5 ++++- .github/workflows/test.yml | 4 ++++ 3 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/workflows/golangci.yml b/.github/workflows/golangci.yml index 418b08a..e4676ea 100644 --- a/.github/workflows/golangci.yml +++ b/.github/workflows/golangci.yml @@ -1,6 +1,10 @@ name: Golangci-Lint on: [pull_request] + +permissions: + contents: read + jobs: lint: runs-on: ubuntu-latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1471693..9a4b0f3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,9 @@ on: tags: - "v*" +permissions: + contents: write + jobs: release: runs-on: ubuntu-latest @@ -15,6 +18,6 @@ jobs: - name: Release uses: goreleaser/goreleaser-action@v6 with: - args: release --rm-dist + args: release --clean env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index ef08527..09a993f 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -1,6 +1,10 @@ name: Test on: [push, pull_request] + +permissions: + contents: read + jobs: test: runs-on: ubuntu-latest