From 985f803e9c2cf470c57d3331147c5e15fab73343 Mon Sep 17 00:00:00 2001 From: shannonwells Date: Fri, 14 Aug 2026 16:57:42 -0700 Subject: [PATCH 1/2] set read only permissions in workflows --- .github/workflows/main.yml | 2 ++ .github/workflows/publish-next.yml | 2 ++ .github/workflows/release.yml | 2 ++ 3 files changed, 6 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 2d676a7e..dbcc4e74 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -1,5 +1,7 @@ # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json name: Tests CI +permissions: + contents: read on: push: branches: [main] diff --git a/.github/workflows/publish-next.yml b/.github/workflows/publish-next.yml index 0f1e51bc..a45306c6 100644 --- a/.github/workflows/publish-next.yml +++ b/.github/workflows/publish-next.yml @@ -1,5 +1,7 @@ # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json name: Publish NPM @next +permissions: + contents: read on: push: branches: [main] diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ab411620..881c21e9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,5 +1,7 @@ # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json name: Release Package +permissions: + contents: read on: release: types: [released] From a9d4fd61a05133849f93cc91766547480d67ef12 Mon Sep 17 00:00:00 2001 From: shannonwells Date: Fri, 14 Aug 2026 17:01:48 -0700 Subject: [PATCH 2/2] version updates need write perms --- .github/workflows/publish-next.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-next.yml b/.github/workflows/publish-next.yml index a45306c6..e0521f9b 100644 --- a/.github/workflows/publish-next.yml +++ b/.github/workflows/publish-next.yml @@ -1,7 +1,7 @@ # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json name: Publish NPM @next permissions: - contents: read + contents: write on: push: branches: [main] diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 881c21e9..8ab21f9c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,7 +1,7 @@ # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json name: Release Package permissions: - contents: read + contents: write on: release: types: [released]