Set explicit Docker permissions

astral-sh · Jan 19, 2024 · 049c9c6 · 049c9c6
1 parent 6af4eb7
commit 049c9c6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -100,6 +100,10 @@ jobs:
     with:
       plan: ${{ needs.plan.outputs.val }}
     secrets: inherit
+    permissions:
+      packages: write
+      contents: read
+
 
   # Build and package all the platform-agnostic(ish) things
   build-global-artifacts:

diff --git a/Cargo.toml b/Cargo.toml
@@ -167,3 +167,5 @@ build-local-artifacts = false
 local-artifacts-jobs = ["./build-binaries", "./build-docker"]
 # Publish jobs to run in CI
 publish-jobs = ["./publish-pypi"]
+# For: `permissions: packages: write`.
+allow-dirty = ["ci"]