Merge pull request #638 from radixdlt/fix/id-permission-at-workflow-l…

…evel Add ID permission at workflow level
radixdlt · Feb 1, 2024 · 4fda101 · 4fda101
2 parents 9836016 + 116edc9
commit 4fda101
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -12,18 +12,21 @@ on:
       - develop
       - release\/*
 
+permissions:
+      id-token: write
+      pull-requests: write
+      contents: read
+      deployments: write
+      packages: write
+
 env:
   DOTNET_VERSION: "7.0.x"
 
 jobs:
   snyk-scan:
     name: snyk scan
     runs-on: ubuntu-latest
-    permissions:
-      id-token: write
-      pull-requests: read
-      contents: read
-      deployments: write
+
     steps:
       - uses: RDXWorks-actions/checkout@main
       - uses: radixdlt/public-iac-resuable-artifacts/fetch-secrets@main