ci: scope release token permissions to jobs (#1220)

This commit is contained in:
Jack Amadeo 2026-08-27 05:52:18 -04:00 • committed by GitHub
commit 103bf239b3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,8 +1,6 @@
name: Release-plz name: Release-plz
permissions: permissions: {}
pull-requests: write
contents: write
on: on:
push: push:
@ -18,6 +16,7 @@ jobs:
if: ${{ github.repository_owner == 'modelcontextprotocol' }} if: ${{ github.repository_owner == 'modelcontextprotocol' }}
permissions: permissions:
contents: write contents: write
pull-requests: read
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1