[READ-ONLY] Mirror of https://github.com/bombshell-dev/tty. Platform independent 2D layout engine for terminal applications based on Clay
chore: limit id-token permission to the publishing steps
Willow (GHOST)
(May 24, 2026, 3:53 PM +0100)
851de350
822b00e6
+6
-1
+6
-1
.github/workflows/publish.yml
+6
-1
.github/workflows/publish.yml
···
7
7
8
8
permissions:
9
9
contents: read
10
-
id-token: write
11
10
12
11
jobs:
13
12
verify-jsr:
···
79
78
publish-npm:
80
79
needs: [verify-jsr, verify-npm]
81
80
runs-on: ubuntu-latest
81
+
permissions:
82
+
contents: read
83
+
id-token: write
82
84
83
85
steps:
84
86
- name: Setup Node
···
99
101
publish-jsr:
100
102
needs: [verify-jsr, verify-npm]
101
103
runs-on: ubuntu-latest
104
+
permissions:
105
+
contents: read
106
+
id-token: write
102
107
103
108
steps:
104
109
- name: checkout