Use better CI scripts (#27)

cristalhq · Jan 27, 2022 · 394b724 · 394b724
1 parent ed44a99
commit 394b724
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -1,5 +1,7 @@
 name: build
 
+permissions: read-all
+
 on:
   push:
     branches: [main]
@@ -14,10 +16,12 @@ on:
 # See https://github.com/cristalhq/.github/.github/workflows
 jobs:
   build:
-    uses: cristalhq/.github/.github/workflows/build.yml@main
+    uses: cristalhq/.github/.github/workflows/build.yml@e7c9d97e1ed043d608a701c651cf6c0820dc44f2 # v0.1.1
 
   release:
     if: github.event_name == 'workflow_dispatch'
-    uses: cristalhq/.github/.github/workflows/release.yml@main
+    uses: cristalhq/.github/.github/workflows/release.yml@e7c9d97e1ed043d608a701c651cf6c0820dc44f2 # v0.1.1
+    permissions: 
+      contents: write
     with:
       tag: ${{ github.event.input.tag }}