Scope permissions to build job

holochain · Jun 5, 2024 · 506a376 · 506a376
1 parent 1815c28
commit 506a376
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/build-and-cache.yaml b/.github/workflows/build-and-cache.yaml
@@ -6,10 +6,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}
   cancel-in-progress: true
 
-permissions:
-  contents: read
-  id-token: write
-
 jobs:
   nix-check:
     runs-on: ubuntu-latest
@@ -44,6 +40,10 @@ jobs:
 
     runs-on: ${{ matrix.os }}
 
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Print platform information
         run: uname -ms