Merge pull request #1292 from GSA/notify-api-144

make it possible to write secrets
GSA · Aug 22, 2024 · 916ba67 · 916ba67
2 parents ba243ff + 9c3280f
commit 916ba67
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -8,7 +8,9 @@ on:
     branches: [ main ] # Redundant, workflow_run events are only triggered on default branch (`main`)
 
 permissions:
-  contents: read
+  contents: write
+  actions: write
+  secrets: write  # pragma: allowlist secret
 
 jobs:
   rotate-secret: