fix permissions error in java-release (#517)

Signed-off-by: Bob Callaway <[email protected]>
sigstore · Jan 29, 2025 · c13eed9 · c13eed9
1 parent 68cc7d2
commit c13eed9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/java-release.yml b/.github/workflows/java-release.yml
@@ -9,6 +9,8 @@ permissions: {}
 
 jobs:
   ci:
+    permissions:
+      contents: read
     uses: ./.github/workflows/java-build.yml
 
   strip-tag:
@@ -27,6 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [ci, strip-tag]
     permissions:
+      contents: read  # to checkout code
       id-token: write # to sign with sigstore
     steps:
       - name: checkout tag