Skip to content

Commit af22d07

Browse files
committed
Use permissions in the release workflow instead of fiddling with keys and their premissions
1 parent 4f0737a commit af22d07

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

.github/workflows/release.yaml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,11 @@ on:
66
tags:
77
- "**"
88

9+
permissions: #See https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
10+
contents: write # Can make a release
11+
packages: write # Can upload packages
12+
pull-requests: write # Can create pull requests (if needed for brews etc.)
13+
914
jobs:
1015
release:
1116
name: Release
@@ -28,7 +33,7 @@ jobs:
2833
version: latest
2934
args: release --clean
3035
env:
31-
GITHUB_TOKEN: ${{ secrets.PACKAGES_TOKEN }}
3236
MASTODON_CLIENT_ID: ${{ secrets.MASTODON_CLIENT_ID }}
3337
MASTODON_CLIENT_SECRET: ${{ secrets.MASTODON_CLIENT_SECRET }}
34-
MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }}
38+
MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }}
39+

0 commit comments

Comments
 (0)