ci: add extra permissions for provenance

mscharley · Oct 21, 2023 · 5765443 · 5765443
1 parent 7154fec
commit 5765443
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/changesets.yml b/.github/workflows/changesets.yml
@@ -10,6 +10,9 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   release:
     uses: mscharley/.github/.github/workflows/changesets.yml@main
+    permissions:
+      contents: read
+      id-token: write
     secrets:
       token: ${{ secrets.DEPENDENCY_UPDATE_GITHUB_TOKEN }}
       npm-token: ${{ secrets.NPM_TOKEN }}