QA: add specific permissions for the token to push into packages.

xibosignage · Feb 29, 2024 · 34f49a6 · 34f49a6
1 parent fccfca6
commit 34f49a6
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/build-pr.yaml b/.github/workflows/build-pr.yaml
@@ -1,4 +1,4 @@
-name: Build Container
+name: Build PR
 
 on:
   pull_request_review:
@@ -9,6 +9,9 @@ jobs:
     name: Build PR container
     if: github.repository == 'xibosignage/xibo-cms' && github.event.review.state == 'APPROVED'
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v1