chore: Update permissions

mermaid-js · Sep 2, 2024 · 6bdeb7a · 6bdeb7a
1 parent 3f699ed
commit 6bdeb7a
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,9 +12,11 @@ permissions: # added using https://github.com/step-security/secure-repo
 
 jobs:
   release:
+    if: github.repository == 'sveltejs/kit'
     permissions:
-      contents: write # for changesets/action to push to the repo
-      pull-requests: write # for changesets/action to create PRs
+      contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
+      pull-requests: write # to create pull request (changesets/action)
     name: Release
     runs-on: ubuntu-latest
     steps: