feat: add permissions to actions (#2796)

This commit is contained in:
Pete Davison
2026-04-15 13:27:23 +01:00
committed by GitHub
parent 8fe3d048fa
commit 697ef35303
9 changed files with 46 additions and 24 deletions

View File

@@ -3,11 +3,11 @@ name: goreleaser
on:
push:
tags:
- 'v*'
- "v*"
permissions:
id-token: write # Required for OIDC
contents: read
id-token: write # Required for OIDC
contents: write
jobs:
goreleaser:
@@ -25,8 +25,8 @@ jobs:
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
with:
node-version: '24'
registry-url: 'https://registry.npmjs.org'
node-version: "24"
registry-url: "https://registry.npmjs.org"
- name: Update npm
run: npm install -g npm@latest
@@ -37,8 +37,8 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
with:
package_json_file: 'website/package.json'
run_install: 'true'
package_json_file: "website/package.json"
run_install: "true"
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7
@@ -47,7 +47,7 @@ jobs:
version: latest
args: release --clean --draft
env:
GITHUB_TOKEN: ${{secrets.GH_PAT}}
GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
GORELEASER_KEY: ${{secrets.GORELEASER_KEY}}
CLOUDSMITH_TOKEN: ${{secrets.CLOUDSMITH_TOKEN}}