build: harden sync-release-assets.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
Alex committed
Nov 3, 2022 at 23:51 UTC
c9f944cd624c7801c9790995b2d175131021bd06
1 file changed
+4
.github/workflows/sync-release-assets.yml
+4
@@ -9,8 +9,12 @@ concurrency:
9
group: release-assets-dist-sync
10
cancel-in-progress: true
11
12
+permissions: {}
13
jobs:
14
sync-github-and-dist-ipfs-tech:
15
+ permissions:
16
+ contents: write # to upload release asset
17
+
18
if: github.repository == 'ipfs/kubo' || github.event_name == 'workflow_dispatch'
19
runs-on: "ubuntu-latest"
20
steps: