build: Constrain permissions for the "build" workflow steps

This workflow only generates artifacts and doesn't need to modify anything
about the repository.
This commit is contained in:
Martin Atkins 2022-01-03 10:45:08 -08:00
parent 3bf758eaf5
commit c1699ea80c
1 changed files with 4 additions and 0 deletions

View File

@ -18,6 +18,10 @@ on:
env: env:
PKG_NAME: "terraform" PKG_NAME: "terraform"
permissions:
contents: read
statuses: write
jobs: jobs:
get-product-version: get-product-version:
name: "Determine intended Terraform version" name: "Determine intended Terraform version"