3 files changed, 7 insertions, 3 deletions
diff --git a/.github/workflows/publish-chrome-development.yml b/.github/workflows/publish-chrome-development.yml
index 669a6b57..a21dd52a 100644
--- a/.github/workflows/publish-chrome-development.yml
+++ b/.github/workflows/publish-chrome-development.yml
@@ -13,7 +13,6 @@ on:
         required: false
         default: "10"
 permissions:
-  actions: write
   contents: read
 jobs:
   upload-on-webstore:
@@ -22,6 +21,8 @@ jobs:
     outputs:
       result: ${{ steps.webStorePublish.outcome }}
       releaseUploadUrl: ${{ steps.getZipAsset.outputs.releaseUploadUrl }}
+    permissions:
+      actions: write
     steps:
       - name: Get the next attempt number
         id: getNextAttemptNumber
diff --git a/.github/workflows/publish-chrome.yml b/.github/workflows/publish-chrome.yml
index cb47d565..a64b3e50 100644
--- a/.github/workflows/publish-chrome.yml
+++ b/.github/workflows/publish-chrome.yml
@@ -13,7 +13,6 @@ on:
         required: false
         default: "10"
 permissions:
-  actions: write
   contents: read
 jobs:
   upload-on-webstore:
@@ -22,6 +21,8 @@ jobs:
     outputs:
       result: ${{ steps.webStorePublish.outcome }}
       releaseUploadUrl: ${{ steps.getZipAsset.outputs.releaseUploadUrl }}
+    permissions:
+      actions: write
     steps:
       - name: Get the next attempt number
         id: getNextAttemptNumber
diff --git a/.github/workflows/publish-firefox-development.yml b/.github/workflows/publish-firefox-development.yml
index 0ed07326..b8245301 100644
--- a/.github/workflows/publish-firefox-development.yml
+++ b/.github/workflows/publish-firefox-development.yml
@@ -7,12 +7,14 @@ on:
   release:
     types: [prereleased]
 permissions:
-  contents: write
+  contents: read
 jobs:
   build-signed-xpi-asset:
     needs: ensure-zip
     runs-on: ubuntu-latest
     environment: cd
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3