Limit permissions

Author: WesCossick

.github/workflows/main.yml

@@ -13,10 +13,6 @@ on:
     branches:
       - master
 
-permissions:
-  id-token: write
-  contents: read
-
 jobs:
   lint:
     name: Lint code
@@ -95,6 +91,9 @@ jobs:
       - test
       - verify-website
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - name: Use Node.js