Update workflow permissions

flcdrg · Apr 25, 2024 · 54e6eba · 54e6eba
1 parent 15b7658
commit 54e6eba
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -46,14 +46,17 @@ jobs:
 
     runs-on: windows-2019
 
-    permissions:
-      checks: write
+    permissions: write-all
 
     env:
       Configuration: Release
       Release_body: ${{ needs.update_release_draft.outputs.Release_body }}
 
     steps:
+    - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+      with:
+        config: ${{ vars.PERMISSIONS_CONFIG }}
+
     - name: Dump needs context
       env:
         NEEDS_CONTEXT: ${{ toJson(needs) }}

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -8,8 +8,12 @@ on:
 jobs:
   publish:
     runs-on: windows-latest
+    permissions: write-all
 
     steps:  
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+        with:
+          config: ${{ vars.PERMISSIONS_CONFIG }}
 
       - name: Download Assets
         uses: i3h/[email protected]