chore: refine token permissions in workflows (#44)

process-analytics · Jul 21, 2023 · 100bb41 · 100bb41
1 parent af65ad9
commit 100bb41
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 4 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -29,10 +29,6 @@ on:
 jobs:
   build:
     runs-on: ubuntu-22.04
-    permissions:
-      # SonarCloud: checks and pull-requests
-      checks: write
-      pull-requests: write
     steps:
       - uses: actions/checkout@v3
       - name: Build Setup

diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
@@ -7,6 +7,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     permissions:
+      # required for "npm provenance"
       id-token: write
       contents: write
     steps: