ci(github): fix release workflow to publish npm package

SimonGolms · Nov 18, 2023 · 0e914e4 · 0e914e4
1 parent 87d453d
commit 0e914e4
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -6,10 +6,19 @@ on:
       - next
       - beta
   workflow_dispatch:
+
+permissions:
+  contents: read # for checkout
+
 jobs:
   release:
     name: Release
     runs-on: ubuntu-22.04
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     env:
       HUSKY: 0 # Disable husky (git hooks) in CI, see: https://typicode.github.io/husky/#/?id=disable-husky-in-cidocker
     steps: