From 9c46e32f0a66d82bc4c75f7a59ecbd0e7ab05c45 Mon Sep 17 00:00:00 2001
From: Darius Jahandarie <djahandarie@gmail.com>
Date: Sat, 18 Mar 2023 11:45:44 +0900
Subject: Fix cd workflow permissions

---
 .github/workflows/publish-chrome-development.yml  | 3 ++-
 .github/workflows/publish-chrome.yml              | 3 ++-
 .github/workflows/publish-firefox-development.yml | 4 +++-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish-chrome-development.yml b/.github/workflows/publish-chrome-development.yml
index 669a6b57..a21dd52a 100644
--- a/.github/workflows/publish-chrome-development.yml
+++ b/.github/workflows/publish-chrome-development.yml
@@ -13,7 +13,6 @@ on:
         required: false
         default: "10"
 permissions:
-  actions: write
   contents: read
 jobs:
   upload-on-webstore:
@@ -22,6 +21,8 @@ jobs:
     outputs:
       result: ${{ steps.webStorePublish.outcome }}
       releaseUploadUrl: ${{ steps.getZipAsset.outputs.releaseUploadUrl }}
+    permissions:
+      actions: write
     steps:
       - name: Get the next attempt number
         id: getNextAttemptNumber
diff --git a/.github/workflows/publish-chrome.yml b/.github/workflows/publish-chrome.yml
index cb47d565..a64b3e50 100644
--- a/.github/workflows/publish-chrome.yml
+++ b/.github/workflows/publish-chrome.yml
@@ -13,7 +13,6 @@ on:
         required: false
         default: "10"
 permissions:
-  actions: write
   contents: read
 jobs:
   upload-on-webstore:
@@ -22,6 +21,8 @@ jobs:
     outputs:
       result: ${{ steps.webStorePublish.outcome }}
       releaseUploadUrl: ${{ steps.getZipAsset.outputs.releaseUploadUrl }}
+    permissions:
+      actions: write
     steps:
       - name: Get the next attempt number
         id: getNextAttemptNumber
diff --git a/.github/workflows/publish-firefox-development.yml b/.github/workflows/publish-firefox-development.yml
index 0ed07326..b8245301 100644
--- a/.github/workflows/publish-firefox-development.yml
+++ b/.github/workflows/publish-firefox-development.yml
@@ -7,12 +7,14 @@ on:
   release:
     types: [prereleased]
 permissions:
-  contents: write
+  contents: read
 jobs:
   build-signed-xpi-asset:
     needs: ensure-zip
     runs-on: ubuntu-latest
     environment: cd
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
 
-- 
cgit v1.2.3