Tighten permissions for merge-main

bcgov · Jan 6, 2025 · f0c4dbb · f0c4dbb
1 parent c4b3af8
commit f0c4dbb
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/merge-main.yml b/.github/workflows/merge-main.yml
@@ -8,13 +8,12 @@ on:
       - "**.md"
   workflow_dispatch:
 
-env:
-  NAME: fom
-
 concurrency:
   group: ${{ github.workflow }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   vars:
     name: Set Variables
@@ -133,6 +132,8 @@ jobs:
   prod-promotions:
     name: Promote images to PROD
     needs: [deploy-prod, vars]
+    permissions:
+      packages: write
     runs-on: ubuntu-24.04
     strategy:
       matrix: