Stramme inn github token scopes.

navikt · Jul 4, 2023 · c185ce1 · c185ce1
1 parent 5389019
commit c185ce1
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -21,14 +21,18 @@ on:
 jobs:
   build-feature:
     name: Build
+    permissions:
+      contents: read
     uses: navikt/fp-gha-workflows/.github/workflows/build-feature-postgres.yml@main
     with:
       postgres-user: unittest
-      sonar-scan: true # default: false
     secrets: inherit
 
   release-drafter:
     name: Update
+    permissions:
+      contents: write
+      pull-requests: read
     if: github.ref_name == 'master'
     needs: build-feature
     uses: navikt/fp-gha-workflows/.github/workflows/release-drafter.yml@main

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -6,6 +6,8 @@ on:
 jobs:
   release:
     name: Feature
+    permissions:
+      packages: write
     uses: navikt/fp-gha-workflows/.github/workflows/release-feature.yml@main
     with:
       release-version: ${{ github.event.release.tag_name }}