From 8e3e6769ed542e04abbe0462a9bb606fdb28c937 Mon Sep 17 00:00:00 2001
From: Nawaz Dhandala <hello@nawazdhandala.com>
Date: Fri, 13 Mar 2026 10:15:38 +0000
Subject: [PATCH] chore: update permissions in release workflows for
 consistency

---
 .github/workflows/release.yml       | 10 ++++++++++
 .github/workflows/test-release.yaml |  5 +++++
 2 files changed, 15 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a69d9899e9..b11a8ca225 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,6 +17,10 @@ on:
         type: boolean
         default: false
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   generate-build-number:
     runs-on: ubuntu-latest
@@ -1460,6 +1464,8 @@ jobs:
   infrastructure-agent-deploy:
     needs: [draft-github-release, generate-build-number, read-version]
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Free Disk Space (Ubuntu)
         uses: jlumbroso/free-disk-space@main
@@ -1516,6 +1522,8 @@ jobs:
   mobile-app-android-deploy:
     needs: [draft-github-release, generate-build-number, read-version]
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -1570,6 +1578,8 @@ jobs:
   mobile-app-ios-deploy:
     needs: [draft-github-release, generate-build-number, read-version]
     runs-on: macos-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/test-release.yaml b/.github/workflows/test-release.yaml
index 8c1f626581..d8dfedb552 100644
--- a/.github/workflows/test-release.yaml
+++ b/.github/workflows/test-release.yaml
@@ -8,6 +8,11 @@ on:
   push:
     branches:
       - "master"
+
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   generate-build-number:
     runs-on: ubuntu-latest