TFP-5516: Strammer inn gha token scopes

navikt · Jul 12, 2023 · 6a9ad02 · 6a9ad02
1 parent cb50e66
commit 6a9ad02
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -16,14 +16,17 @@ on:
 
 jobs:
     build-feature:
-        name: Build
+        name: Build    
         uses: navikt/fp-gha-workflows/.github/workflows/build-feature.yml@main
         with:
             sonar-scan: true # default: false
         secrets: inherit
 
     release-drafter:
         name: Update
+        permissions:
+            contents: write
+            pull-requests: read
         if: github.ref_name == 'master'
         needs: build-feature
         uses: navikt/fp-gha-workflows/.github/workflows/release-drafter.yml@main

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -6,6 +6,8 @@ on:
 jobs:
     release:
         name: Feature
+        permissions:
+            packages: write
         uses: navikt/fp-gha-workflows/.github/workflows/release-feature.yml@main
         with:
             release-version: ${{ github.event.release.tag_name }}