Skip to content

Commit 4bb2d22

Browse files
committed
reduce permissions since github_token handles writing
1 parent aa5cb70 commit 4bb2d22

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

.github/workflows/release.yml

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -70,10 +70,8 @@ jobs:
7070

7171
# OIDC permissions for npm trusted publishing
7272
permissions:
73-
contents: write # For pushing commits and tags
74-
issues: write # For semantic-release to comment on issues
75-
pull-requests: write # For semantic-release to comment on PRs
76-
id-token: write # Required for OIDC authentication with npm
73+
id-token: write # Required for OIDC authentication with npm
74+
contents: read
7775

7876
env:
7977
GITHUB_TOKEN: ${{ secrets.MP_INTEGRATIONS_SEMANTIC_RELEASE_BOT }}

0 commit comments

Comments
 (0)