From 100b650dd52495227a85b1ed61fcf158da897b94 Mon Sep 17 00:00:00 2001
From: Huy Mai <huy.mai@est.tech>
Date: Tue, 7 Jan 2025 14:02:01 +0200
Subject: [PATCH] Add read permission to build job in release wf

Build job requires read permission to run.

Signed-off-by: Huy Mai <huy.mai@est.tech>
---
 .github/workflows/release.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e1f71649..09f8e24c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -118,6 +118,8 @@ jobs:
         tag_name: ${{ env.RELEASE_TAG }}
 
   build_ipam:
+    permissions:
+      contents: read
     needs: push_release_tags
     name: Build IPAM container image
     if: github.repository == 'metal3-io/ip-address-manager'