ci: set explicit permissions for npm-publish workflow

Automattic · Nov 7, 2023 · 6ed3804 · 6ed3804
1 parent 488586a
commit 6ed3804
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -9,6 +9,9 @@ jobs:
     name: Publish to npm
     runs-on: ubuntu-latest
     if: contains( github.event.pull_request.labels.*.name, '[ Type ] NPM version update' ) && startsWith( github.head_ref, 'release/') && github.event.pull_request.merged == true
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: Automattic/vip-actions/[email protected]
         with: