add permissions and hardening

adanalvarez · Feb 16, 2023 · 6564f62 · 6564f62
1 parent b8dfb88
commit 6564f62
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml
@@ -8,7 +8,13 @@ on:
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
+      - 
+        uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # v2.1.0
+        with:
+          egress-policy: audit
       -
         name: Checkout
         uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c