Skip to content

ci: fix permissions

ci: fix permissions #2

Workflow file for this run

name: Push & Release 🌍
concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'push' && github.ref }}
cancel-in-progress: true
on:
release:
types:
- released
- prereleased
push:
branches:
- main
jobs:
main:
name: ${{ github.event_name == 'push' && 'Unstable πŸš€βš οΈ' || 'Stable πŸ·οΈβœ…' }}
uses: ./.github/workflows/__package.yml
with:
commit: ${{ github.event_name == 'push' && github.sha }}
is_prerelease: false
codeql:
name: GitHub CodeQL πŸ”¬
uses: ./.github/workflows/__codeql.yml
permissions:
actions: read
contents: read
security-events: write
with:
commit: ${{ github.sha }}
deploy:

Check failure on line 34 in .github/workflows/push_release.yml

View workflow run for this annotation

GitHub Actions / Push & Release 🌍

Invalid workflow file

The workflow is not valid. .github/workflows/push_release.yml (Line: 34, Col: 3): Error calling workflow 'isa-group/bpm2025/.github/workflows/__deploy.yml@86eb5fb179a6a5855ef77ce23bd9764ef2591c91'. The workflow is requesting 'pages: write, id-token: write', but is only allowed 'pages: none, id-token: none'.
name: Deploy πŸš€
if: ${{ github.repository == 'isa-group/bpm2025' }}
uses: ./.github/workflows/__deploy.yml
needs:
- main
permissions:
contents: read
deployments: write
secrets: inherit
with:
branch: ${{ github.ref_name }}
comment: false
is_prerelease: false