chore: update publish-docs permissions to be more targeted. (#812)

This is recommended by OSSF.
2026-02-19 16:08:40 +01:00 · 2026-02-19 16:08:40 +01:00 · 86d05a12f7
commit 86d05a12f7
parent 9f22cf142e
1 changed files with 3 additions and 2 deletions
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@ -5,11 +5,12 @@ on:
    types: [published]
  workflow_dispatch:

-permissions:
-  contents: write
+permissions: read-all

 jobs:
  deploy:
+    permissions:
+      contents: write
    runs-on: ubuntu-latest
    steps:
      - name: Check out code