TFP-5516: Strammer inn gha token scopes

navikt · Jul 12, 2023 · 8d06025 · 8d06025
1 parent 915431f
commit 8d06025
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -19,6 +19,9 @@ on:
 jobs:
   build-app:
     name: Build
+    permissions:
+      contents: read
+      packages: write
     uses: navikt/fp-gha-workflows/.github/workflows/build-app-no-db.yml@main
     with:
       build-image: ${{ github.ref_name == 'master' }} # default: true
@@ -29,6 +32,9 @@ jobs:
 
   release-drafter:
     name: Update
+    permissions:
+      contents: write
+      pull-requests: read
     if: github.ref_name == 'master'
     needs: build-app
     uses: navikt/fp-gha-workflows/.github/workflows/release-drafter.yml@main

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -6,6 +6,8 @@ on:
 jobs:
   release:
     name: Feature
+    permissions:
+      packages: write
     uses: navikt/fp-gha-workflows/.github/workflows/release-feature.yml@main
     with:
       release-version: ${{ github.event.release.tag_name }}