ad permissions

Author: FGRCL

.github/workflows/pr.yaml

@@ -1,6 +1,9 @@
 name: Pull Request Checks
 
-on: [ push ]
+on:
+  push:
+    branches:
+      - !main
 
 jobs:
   code-quality:

.github/workflows/release-staging.yaml

@@ -14,5 +14,8 @@ jobs:
     uses: ./.github/workflows/test.yaml
   publish:
     name: Publish staging release
+    permissions:
+      id-token: write
+      pages: write
     uses: ./.github/workflows/publish-test.yaml
     needs: [code-quality, test]

.github/workflows/release.yaml

@@ -8,4 +8,6 @@ on:
 jobs:
   publish:
     name: Publish release
+    permissions:
+      id-token: write
     uses: ./.github/workflows/publish.yaml