Merge branch 'cloudnative-pg:dev/2732' into dev/2732

EnterpriseDB · Sep 28, 2023 · 4ca1cab · 4ca1cab
2 parents 22c5bb6 + c29fc96
commit 4ca1cab
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
@@ -496,6 +496,9 @@ jobs:
   olm-bundle:
     name: Create OLM bundle and catalog
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: write
     needs:
       - buildx
     if: |
@@ -544,6 +547,9 @@ jobs:
   olm-scorecard:
     name: Running OLM scorecard test
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: read
     needs:
       - buildx
       - olm-bundle
@@ -592,6 +598,9 @@ jobs:
         test: [ kiwi, lemon, orange ]
     name: Running OLM ${{ matrix.test }} test
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: read
     needs:
       - buildx
       - olm-scorecard
@@ -609,6 +618,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: k8s-operatorhub/community-operators
+          persist-credentials: false
 
       - name: Login to ghcr.io
         uses: docker/login-action@v3