build: harden build_docker.yml permissions

Signed-off-by: Alex <[email protected]>
chaoss · Dec 8, 2022 · b56ef7c · b56ef7c
1 parent 804b1ee
commit b56ef7c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build_docker.yml b/.github/workflows/build_docker.yml
@@ -10,8 +10,14 @@ on:
     types:
       - published
 
+permissions: {}
+
 jobs:
   build:
+    permissions:
+      contents: read #  to fetch code (actions/checkout)
+      packages: write #  to push docker image
+
     name: Build image
     runs-on: ubuntu-latest
     steps: