fix: workflow permissions (#1263)

matthiasbruns · web-flow · commit 4c1b948b736f · 2025-11-24T23:23:40.000+01:00
Fixes errors while releasing https://github.com/open-component-model/open-component-model/actions/runs/19642108763 Signed-off-by: Matthias Bruns <git@matthiasbruns.com>
diff --git a/.github/workflows/release-go-submodule.yaml b/.github/workflows/release-go-submodule.yaml
@@ -177,8 +177,9 @@ jobs:
     uses: ./.github/workflows/publish-helminput-plugin-component.yaml
     secrets: inherit
     permissions:
+      contents: read
       id-token: write
       attestations: write
       packages: write
     with:
-      ref: ${{ needs.version.outputs.new_tag }}
+      ref: ${{ needs.version.outputs.new_tag }}
