Skip to content

Commit d68bf7a

Browse files
committed
Move permissions config to validate job scope
Previously, permissions were set at the workflow level. This change moves the permissions configuration to the validate job, limiting contents: read to only that job for improved security and clarity. #35
1 parent 914b66f commit d68bf7a

1 file changed

Lines changed: 2 additions & 3 deletions

File tree

‎.github/workflows/release.yml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,11 @@ on:
1313
type: boolean
1414
default: false
1515

16-
permissions:
17-
contents: read
18-
1916
jobs:
2017
validate:
2118
runs-on: ubuntu-latest
19+
permissions:
20+
contents: read
2221
steps:
2322
- name: Validate version format
2423
env:

0 commit comments

Comments
 (0)