Update release-draft.yml

- Limits permissions of draft release creation workflow Signed-off-by: Esta Nagy <[email protected]>
nagyesta · Jul 28, 2024 · d380b05 · d380b05
1 parent 1e6437c
commit d380b05
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml
@@ -4,10 +4,15 @@ on:
     tags:
       - v*
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Draft release action
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Create release
         uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1