Update release.yml (#10642)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aa390b65f12e56b44349322e084899a475e9208c..6b5d18c43020019a810cc9e379840d87a8c0395f 100644 (file)
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -2,10 +2,11 @@ name: Release
 
 on:
   release:
-    permissions:
-      contents: write  # for actions/upload-release-asset to upload release asset
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     permissions:
@@ -20,6 +21,8 @@ jobs:
           TAG: ${{ github.event.release.tag_name }}
 
   release:
+    permissions:
+      contents: write  # for actions/upload-release-asset to upload release asset
     needs: setup
     runs-on: ubuntu-latest
     steps: