From f48c00197b4e61254045cdd401192dadc3bf68ab Mon Sep 17 00:00:00 2001
From: Jay Jie <jyz1992@hotmail.com>
Date: Sun, 17 Sep 2023 00:14:12 -0700
Subject: [PATCH] fix: explicit permission in github workflow

---
 .github/workflows/ build-and-publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/ build-and-publish.yml b/.github/workflows/ build-and-publish.yml
index c689c52..40bd96f 100644
--- a/.github/workflows/ build-and-publish.yml	
+++ b/.github/workflows/ build-and-publish.yml	
@@ -18,6 +18,9 @@ jobs:
     name: Build Docker image and push to repositories
     # run only when code is compiling and tests are passing
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     # steps to perform in job
     steps: