From 6a8c88930b8801ffbb2eb9d8967da6a86da16d47 Mon Sep 17 00:00:00 2001
From: Xi Xu <i@xi-xu.me>
Date: Fri, 11 Jul 2025 17:49:37 +0800
Subject: [PATCH] Potential fix for code scanning alert no. 1: Workflow does
 not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 .github/workflows/publish-extension.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/publish-extension.yml b/.github/workflows/publish-extension.yml
index 9e0bb38..960bf8f 100644
--- a/.github/workflows/publish-extension.yml
+++ b/.github/workflows/publish-extension.yml
@@ -5,6 +5,10 @@ on:
     tags:
       - "v*" # Triggers on version tags like v1.0.0, v1.2.3, etc.
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest