Skip to content

Commit 325ef04

Browse files
Potential fix for code scanning alert no. 6: Workflow does not contain permissions (#2076)
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 79f0a6a commit 325ef04

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

.github/workflows/release.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,10 @@ jobs:
1818
release:
1919
name: 🦋 Changesets Release
2020
runs-on: ubuntu-latest
21+
permissions:
22+
contents: write
23+
packages: write
24+
pull-requests: write
2125
if: github.repository == 'triggerdotdev/trigger.dev'
2226
outputs:
2327
published: ${{ steps.changesets.outputs.published }}
@@ -93,6 +97,8 @@ jobs:
9397
publish:
9498
needs: release
9599
uses: ./.github/workflows/publish.yml
100+
permissions:
101+
contents: read
96102
secrets: inherit
97103
# if: needs.release.outputs.published == 'true'
98104
# disable automatic publishing for now

0 commit comments

Comments
 (0)