fix(ci): permissions (#591)

elixirs · Jan 31, 2025 · d78c8f1 · d78c8f1
1 parent d49419a
commit d78c8f1
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -7,6 +7,9 @@ on:
 jobs:
   credo:
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      security-events: write
     steps:
       - uses: actions/[email protected]
       - uses: actions/[email protected]

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -13,7 +13,8 @@ jobs:
   test:
     uses: ./.github/workflows/ci.yaml
     permissions:
-      contents: write
+      contents: read
+      security-events: write
 
   release:
     needs: test