Gran mutex necessary permissions to branch

rabbitmq · Dec 14, 2022 · f06842d · f06842d
1 parent 40ab6c1
commit f06842d
Showing 1 changed file with 10 additions and 10 deletions.
diff --git a/.github/workflows/build-test-publish.yml b/.github/workflows/build-test-publish.yml
@@ -195,7 +195,7 @@ jobs:
     if: ${{ github.event_name != 'pull_request' }}
     # Add "id-token" with the intended permissions.
     permissions:
-      contents: 'read'
+      contents: 'write'
       id-token: 'write'
     needs: build_operator
     strategy:
@@ -215,17 +215,17 @@ jobs:
         - rabbitmq-image: pivotalrabbitmq/rabbitmq:main-otp-max-bazel
           gke-cluster: ci-bunny-2
     steps:
-    - name: Acquire lock for ${{ matrix.gke-cluster }}
-      uses: ben-z/gh-action-mutex@9709ba4d8596ad4f9f8bbe8e0f626ae249b1b3ac
-      with:
-        branch: lock-${{ matrix.gke-cluster }}
     - name: Install Go
       uses: actions/setup-go@v3
       with:
         go-version: ${{ env.GO_VERSION }}
         check-latest: true
     - name: Check out code into the Go module directory
       uses: actions/checkout@v3
+    - name: Acquire lock for ${{ matrix.gke-cluster }}
+      uses: ben-z/gh-action-mutex@9709ba4d8596ad4f9f8bbe8e0f626ae249b1b3ac
+      with:
+        branch: lock-${{ matrix.gke-cluster }}
     - id: 'auth'
       uses: 'google-github-actions/auth@v1'
       with:
@@ -259,21 +259,21 @@ jobs:
     concurrency: ci-bunny-2
     # Add "id-token" with the intended permissions.
     permissions:
-      contents: 'read'
+      contents: 'write'
       id-token: 'write'
     needs: build_operator
     steps:
-    - name: Acquire lock for ci-bunny-2
-      uses: ben-z/gh-action-mutex@9709ba4d8596ad4f9f8bbe8e0f626ae249b1b3ac
-      with:
-        branch: lock-ci-bunny-2
     - name: Install Go
       uses: actions/setup-go@v3
       with:
         go-version: ${{ env.GO_VERSION }}
         check-latest: true
     - name: Check out code into the Go module directory
       uses: actions/checkout@v3
+    - name: Acquire lock for ci-bunny-2
+      uses: ben-z/gh-action-mutex@9709ba4d8596ad4f9f8bbe8e0f626ae249b1b3ac
+      with:
+        branch: lock-ci-bunny-2
     - id: 'auth'
       uses: 'google-github-actions/auth@v1'
       with: