[CI] Add top-level/run-level permissions (#560)

Signed-off-by: Yilong Guo <yilong.guo@intel.com>
intel · Jan 14, 2025 · 82a1258 · 82a1258
1 parent 60df7bc
commit 82a1258
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/patch-release.yml b/.github/workflows/patch-release.yml
@@ -1,5 +1,8 @@
 name: Generate patch releases
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   schedule:
@@ -37,6 +40,9 @@ jobs:
           | xargs -0 -d"\n" printf 'branches_json={"branch":[%s]}' \
           >> $GITHUB_OUTPUT
   release:
+    permissions:
+      # required by softprops/action-gh-release to create a release
+      contents: write
     runs-on: ubuntu-latest
     needs: setup
     strategy: