ci: grant the reusable workflow the permissions its jobs request #336
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Pano Vanilla Theme Release | |
| on: | |
| push: | |
| branches: ["dev", "master"] | |
| # The called workflow's jobs request these; a reusable workflow cannot be | |
| # granted more than the caller allows, so the caller must allow them all. | |
| permissions: | |
| contents: write | |
| issues: write | |
| pull-requests: write | |
| id-token: write | |
| jobs: | |
| release: | |
| # Shared theme pipeline from the engine repo: version-override + license-server | |
| # switches live there once, and packaging uses the DETERMINISTIC zip (its | |
| # sha256 is the premium license identity). | |
| uses: PanoMC/sdk/.github/workflows/theme-release.yml@dev | |
| with: | |
| theme-id: vanilla-theme | |
| secrets: | |
| TOKEN_GITHUB: ${{ secrets.TOKEN_GITHUB }} |