diff options
Diffstat (limited to '.github/workflows/release.yml')
| -rw-r--r-- | .github/workflows/release.yml | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fd293529..7393694c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,13 +6,15 @@ on: - "v*" permissions: - contents: write + contents: read env: FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true jobs: build: + permissions: + contents: read strategy: matrix: include: @@ -44,6 +46,8 @@ jobs: steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - name: Verify tag matches Cargo.toml version run: | @@ -108,9 +112,13 @@ jobs: release: needs: build runs-on: ubuntu-latest + permissions: + contents: write steps: - uses: actions/checkout@v4 + with: + persist-credentials: false - name: Download all artifacts uses: actions/download-artifact@v4 @@ -140,6 +148,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 + persist-credentials: false - name: Close issues referenced by released commits shell: bash @@ -257,6 +266,8 @@ jobs: update-latest-json: needs: release runs-on: ubuntu-latest + permissions: + contents: write steps: - uses: actions/checkout@v4 |