[Security] Token permissions no. 2

2024-12-22 00:33:41 +01:00
parent b86eac20ea
commit f29d4db31e
10 changed files with 36 additions and 27 deletions
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -7,13 +7,13 @@ on:
      - master
      - main

-permissions:
-  contents: read
-  packages: write
+permissions: read-all

 jobs:
  push:
    runs-on: ubuntu-latest
+    permissions:
+      packages: write
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2