ci: adjust permissions for releases

EventSource · Dec 7, 2024 · bd101af · bd101af
1 parent fd57cb4
commit bd101af
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -48,7 +48,8 @@ jobs:
   release:
     name: 'Release: Publish to NPM'
     permissions:
-      contents: read # for checkout
+      issues: write # for release notes, comments…
+      contents: write # for checkout + push + release creation
       id-token: write # to enable use of OIDC for npm provenanc
     if: always() && github.event.inputs.release == 'true' && github.event.inputs.dryrun == 'false'
     runs-on: ubuntu-latest