CI permissions

Duke-GCB · Dec 13, 2024 · c038aef · c038aef
1 parent 657827e
commit c038aef
Showing 1 changed file with 5 additions and 6 deletions.
diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml
@@ -5,20 +5,18 @@ on:
     types: [created]
 
 permissions:
+  id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
   contents: read
+  packages: write
+  attestations: write
 
 jobs:
   deploy:
 
     runs-on: ubuntu-latest
 
     environment: release
-    permissions:
-      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
-      contents: read
-      packages: write
-      attestations: write
-
+
     steps:
     - uses: actions/checkout@v4
     - name: Set up Python
@@ -46,6 +44,7 @@ jobs:
       with:
         skip-existing: true
         repository-url: https://upload.pypi.org/legacy/
+
   container-build:
     runs-on: ubuntu-latest
     steps: