assign packages write permission only on pushing version tags

itchyny · May 5, 2024 · 5a0a8d6 · 5a0a8d6
1 parent f694c1b
commit 5a0a8d6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -79,7 +79,7 @@ jobs:
   docker:
     name: Docker
     permissions:
-      packages: write
+      packages: ${{ startsWith(github.ref, 'refs/tags/v') && 'write' || 'none' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code