build: harden GitHub Workflow permissions (#5660)

Signed-off-by: Alex Low <[email protected]>
grpc · Sep 27, 2022 · e8866a8 · e8866a8
1 parent 8458251
commit e8866a8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -6,6 +6,9 @@ on:
 
 jobs:
   release:
+    permissions:
+      contents: write # to upload release asset (actions/upload-release-asset)
+
     name: Release cmd/protoc-gen-go-grpc
     runs-on: ubuntu-latest
     if: startsWith(github.event.release.tag_name, 'cmd/protoc-gen-go-grpc/')