From d13c435e96096f6a1f7ab315525613f61a7c20fc Mon Sep 17 00:00:00 2001
From: Darius Jahandarie <djahandarie@gmail.com>
Date: Sat, 18 Mar 2023 11:52:25 +0900
Subject: Fix cd workflow permissions (pt 2)

---
 .github/workflows/create-prerelease-on-tag.yml | 4 +++-
 .github/workflows/delay.yml                    | 5 +++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/create-prerelease-on-tag.yml b/.github/workflows/create-prerelease-on-tag.yml
index a2d5fc57..e46f85f4 100644
--- a/.github/workflows/create-prerelease-on-tag.yml
+++ b/.github/workflows/create-prerelease-on-tag.yml
@@ -5,10 +5,12 @@ on:
       - "*.*.*.*"
   workflow_dispatch:
 permissions:
-  contents: write
+  contents: read
 jobs:
   build-release-publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v3
 
diff --git a/.github/workflows/delay.yml b/.github/workflows/delay.yml
index 45e38cbb..11d29bd9 100644
--- a/.github/workflows/delay.yml
+++ b/.github/workflows/delay.yml
@@ -22,12 +22,13 @@ on:
         description: "Max attempts"
         required: false
         default: "10"
-permissions:
-  actions: write
+permissions: {}
 jobs:
   delay:
     runs-on: ubuntu-latest
     environment: 12hoursDelay
+    permissions:
+      actions: write
     steps:
       - name: Start the next attempt
         uses: aurelien-baudet/workflow-dispatch@93e95b157d791ae7f42aef8f8a0d3d723eba1c31 # pin@v2
-- 
cgit v1.2.3