Merge pull request #540 from bingenito/main

chore(actions): update default token permissions to read
morganstanley · Mar 8, 2024 · fc2b92f · fc2b92f
2 parents bc08333 + 17a1bae
commit fc2b92f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/deploy-site.yml b/.github/workflows/deploy-site.yml
@@ -10,12 +10,15 @@ defaults:
     working-directory: ./site
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   build:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Use Node.js ${{ matrix.node-version }}

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
   actions: read
 
 name: Release
@@ -19,7 +19,7 @@ jobs:
     name: Upload Release Asset
     needs: build
     runs-on: windows-latest
-  
+
     steps:
 
       # Using shared artifact from build workflow