chore: add write permissions to release-bot workflow (#1078)

Kong · Jan 23, 2025 · 9f52fd3 · 9f52fd3
1 parent 4d1b3f8
commit 9f52fd3
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/release-bot.yaml b/.github/workflows/release-bot.yaml
@@ -9,6 +9,9 @@ on:
       - 'main'
       - 'release/*'
 
+permissions:
+  contents: read
+
 jobs:
   look_for_release:
     outputs:
@@ -82,6 +85,8 @@ jobs:
         run: exit 1
 
   publish-release:
+    permissions:
+      contents: write
     needs:
       - look_for_release
       - semver
@@ -106,6 +111,8 @@ jobs:
           prerelease: ${{ needs.look_for_release.outputs.release_type == 'prerelease' }}
 
   create-release-branch:
+    permissions:
+      contents: write
     needs:
       - look_for_release
       - publish-release
@@ -127,6 +134,8 @@ jobs:
           sha: '${{ github.sha }}'
 
   create-cherry-pick-branch-to-main:
+    permissions:
+      contents: write
     needs:
       - look_for_release
       - publish-release