mirror of
https://github.com/storytold/vectorcraft.git
synced 2026-10-24 01:37:02 -06:00
ci: move release workflow write permission to job level (SonarCloud S8233) (#3928)
This commit is contained in:
@@ -13,7 +13,7 @@ on:
|
|||||||
default: ""
|
default: ""
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
contents: write
|
contents: read
|
||||||
|
|
||||||
concurrency:
|
concurrency:
|
||||||
group: release-${{ github.ref }}
|
group: release-${{ github.ref }}
|
||||||
@@ -61,6 +61,8 @@ jobs:
|
|||||||
|
|
||||||
release:
|
release:
|
||||||
needs: git-sources
|
needs: git-sources
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
# Intentionally tracked at @main (not SHA-pinned) so org-wide CI improvements, security fixes, and build optimizations propagate without PR churn across all craftapp repos.
|
# Intentionally tracked at @main (not SHA-pinned) so org-wide CI improvements, security fixes, and build optimizations propagate without PR churn across all craftapp repos.
|
||||||
uses: storytold/craft-common-actions/.github/workflows/release.yml@main
|
uses: storytold/craft-common-actions/.github/workflows/release.yml@main
|
||||||
with:
|
with:
|
||||||
|
|||||||
Reference in New Issue
Block a user