OpenSSF Scorecard: fine grained workflow permissions

alex-semenyuk · web-flow · commit d7a433c0bc65 · 2025-02-13T01:34:52.000+05:00
Signed-off-by: alexey semenyuk &lt;alexsemenyuk88@gmail.com&gt;
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -7,6 +7,10 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: read
+  packages: write  
+
 jobs:
   build:
     runs-on: ubuntu-latest
