Try read-permissions in pull-request workflow job

cyber-dojo · Aug 8, 2024 · a434ea3 · a434ea3
1 parent 4cddfbc
commit a434ea3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -55,8 +55,8 @@ jobs:
     needs: [setup]
     runs-on: ubuntu-latest
     permissions:
-      id-token: write
-      contents: write
+      id-token: read
+      contents: read
       pull-requests: read
     steps:
       - uses: actions/[email protected]