mirror of
https://git.mirrors.martin98.com/https://github.com/actions/toolkit
synced 2025-08-22 00:29:09 +08:00
fix permissions for release workflow
Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
parent
c366a07d62
commit
68b042febd
5
.github/workflows/releases.yml
vendored
5
.github/workflows/releases.yml
vendored
@ -5,7 +5,7 @@ on:
|
|||||||
inputs:
|
inputs:
|
||||||
package:
|
package:
|
||||||
required: true
|
required: true
|
||||||
description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache'
|
description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache, attest'
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
test:
|
test:
|
||||||
@ -49,6 +49,9 @@ jobs:
|
|||||||
runs-on: macos-latest
|
runs-on: macos-latest
|
||||||
needs: test
|
needs: test
|
||||||
environment: npm-publish
|
environment: npm-publish
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
id-token: write
|
||||||
steps:
|
steps:
|
||||||
|
|
||||||
- name: download artifact
|
- name: download artifact
|
||||||
|
Loading…
x
Reference in New Issue
Block a user