fix: more job permission fixes

Signed-off-by: Sam Gammon <sam@elide.ventures>
elide-dev · Feb 16, 2024 · 864280d · 864280d
1 parent 5c2c193
commit 864280d
Showing 1 changed file with 13 additions and 11 deletions.
diff --git a/.github/workflows/on.push.yml b/.github/workflows/on.push.yml
@@ -77,17 +77,19 @@ jobs:
     name: "Checks"
     uses: ./.github/workflows/checks.scorecards.yml
     permissions:
-      checks: read
-      deployments: read
-      discussions: read
-      id-token: write
-      issues: read
-      packages: read
-      pages: read
-      pull-requests: read
-      repository-projects: read
-      security-events: write
-      statuses: read
+      actions: "read"
+      contents: "read"
+      checks: "read"
+      deployments: "read"
+      discussions: "read"
+      id-token: "write"
+      issues: "read"
+      packages: "read"
+      pages: "read"
+      pull-requests: "read"
+      repository-projects: "read"
+      security-events: "write"
+      statuses: "read"
 
   ##
   ## Job: Check for Wrapper