cd: use permissions instead of PAT

picomet · Sep 8, 2024 · 3c61f06 · 3c61f06
1 parent 278dbc5
commit 3c61f06
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,6 +5,11 @@ on:
  branches:
  - main
 
+permissions:
+ id-token: write
+ contents: write
+ pull-requests: write
+
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
 jobs:
@@ -15,7 +20,7 @@ jobs:
  - name: Checkout Repo
  uses: actions/checkout@v4
  with:
- token: ${{ secrets.PAT }}
+ token: ${{ secrets.GITHUB_TOKEN }}
 
  - name: Setup Node.js 20
  uses: actions/setup-node@v3
@@ -30,5 +35,5 @@ jobs:
  with:
  publish: npm run release
  env:
- GITHUB_TOKEN: ${{ secrets.PAT }}
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  NPM_TOKEN: ${{ secrets.NPM_TOKEN }}