Move write permissions to the specific job, rather than globally

Signed-off-by: Justin Abrahms <justin@abrah.ms>
open-feature · Oct 3, 2022 · 90bf877 · 90bf877
1 parent 01b98dc
commit 90bf877
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
@@ -12,13 +12,14 @@ on:
     branches: [ master, main ]
 
 permissions:
-  packages: write
   contents: read
 
 jobs:
   build:
 
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
 
     steps:
     - uses: actions/checkout@v3

diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml
@@ -3,7 +3,6 @@ on:
   pull_request:
     branches: [ master, main ]
 permissions:
-  packages: write
   contents: read
 
 jobs:
@@ -15,6 +14,8 @@ jobs:
         ports:
           - 8013:8013
 
+    permissions:
+      packages: write
     steps:
       - name: Check out the code
         uses: actions/checkout@v3