Merge pull request #13 from hughesjs/fix-cd

Added permission for github release and restricted tagger perms
hughesjs · May 6, 2024 · 66c30aa · 66c30aa
2 parents eaf4da6 + 09bf5fb
commit 66c30aa
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/dotnet-cd.yml b/.github/workflows/dotnet-cd.yml
@@ -24,7 +24,8 @@ jobs:
     needs: test
     name: Create a Package Release
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions: 
+      contents: write
     steps:
       - uses: actions/checkout@v4 # Need the full commit history for conventional commit
       - name: Setup .NET
@@ -52,6 +53,8 @@ jobs:
 
 
   github-publish:
+    permissions: 
+      packages: write
     needs: semantic-release
     name: Publish to Github
     runs-on: ubuntu-latest