Limited scope permissions

chipsalliance · Jul 24, 2024 · 0f1b078 · 0f1b078
1 parent 4f4c618
commit 0f1b078
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
@@ -8,10 +8,6 @@ on:
   workflow_dispatch:
   pull_request:
 
-permissions:
-  pages: write
-  id-token: write
-
 jobs:
   # Call auxiliary workflows
   pre_run:
@@ -22,6 +18,9 @@ jobs:
     uses: ./.github/workflows/interactive-debugging.yml
   doc_gen:
     uses: ./.github/workflows/doc-gen.yml
+    permissions:
+      pages: write
+      id-token: write
   post_run:
     name: Call Post Run Final
     runs-on: ubuntu-22.04