🔒️ Move permissions to job level

https://github.com/stoe/action-reporting-cli/security/code-scanning/4
stoe · Apr 21, 2024 · 06c357b · 06c357b
1 parent 8a4871f
commit 06c357b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 9 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -5,14 +5,13 @@ on:
     tags:
       - 'v*.*.*'
 
-permissions:
-  contents: read
-  packages: write
-  id-token: write
-
 jobs:
   publish:
     uses: stoe/policies/.github/workflows/policy-node-publish.yml@main
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     with:
       npm: true
       gh: true

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -7,10 +7,9 @@ on:
     paths-ignore:
       - '*.md'
 
-permissions:
-  contents: read
-  packages: read
-
 jobs:
   test:
     uses: stoe/policies/.github/workflows/policy-node-test.yml@main
+    permissions:
+      contents: read
+      packages: read