added required permissions

Dpbm · Jan 27, 2025 · 0d285b8 · 0d285b8
1 parent 3f2b740
commit 0d285b8
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 14 deletions.
diff --git a/.github/workflows/publish-test-action.yml b/.github/workflows/publish-test-action.yml
@@ -10,6 +10,3 @@ jobs:
             GPG_KEY: ${{ secrets.GPG_KEY }}
             GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
             GPG_KEYID: ${{ secrets.GPG_KEYID }}
-            GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-            actor: ${{ github.actor }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -6,10 +6,6 @@ on:
                 type: string
                 description: 'Set as production to publish your artifacts'
                 default: 'test'
-            actor:
-                type: string
-                description: 'Your github username'
-                required: true
         secrets:
             GPG_KEY:
                 description: 'Your private GPG KEY'
@@ -20,9 +16,6 @@ on:
             GPG_KEYID:
                 description: 'Your GPG KEY last 8 digits'
                 required: true
-            GH_TOKEN:
-                description: 'Your secret GITHUB_TOKEN'
-                required: true
 
 jobs:
     publish_github:
@@ -54,5 +47,5 @@ jobs:
               if: ${{ inputs.env == 'production' }}
               run: ./gradlew publish
               env:
-                  GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
-                  GITHUB_ACTOR: ${{ inputs.actor }}
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  GITHUB_ACTOR: ${{ github.actor }}
diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
@@ -17,12 +17,14 @@ jobs:
 
     publish:
         needs: release
+        permissions:
+            contents: read
+            packages: write
+
         uses: ./.github/workflows/publish.yml
         secrets:
             GPG_KEY: ${{ secrets.GPG_KEY }}
             GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
             GPG_KEYID: ${{ secrets.GPG_KEYID }}
-            GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
             env: 'production'
-            actor: ${{ github.actor }}