From 0e914e4120e6e245ceb5b7fcea4c21d537e8e82e Mon Sep 17 00:00:00 2001
From: Simon Golms <development@gol.ms>
Date: Sat, 18 Nov 2023 23:33:39 +0100
Subject: [PATCH] ci(github): fix release workflow to publish npm package

---
 .github/workflows/release.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4c77b08..f5ad0a9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,10 +6,19 @@ on:
       - next
       - beta
   workflow_dispatch:
+
+permissions:
+  contents: read # for checkout
+
 jobs:
   release:
     name: Release
     runs-on: ubuntu-22.04
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     env:
       HUSKY: 0 # Disable husky (git hooks) in CI, see: https://typicode.github.io/husky/#/?id=disable-husky-in-cidocker
     steps: