chore: set permissions for semantic-release

Author: activescott

.github/workflows/build.yaml

@@ -6,12 +6,6 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
-# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
 # Allow one concurrent deployment
 concurrency:
   group: "pages"
@@ -20,6 +14,14 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    # permissions on the GITHUB_TOKEN to allow deployment to GitHub Pages and for semantic-release
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance and github pages publishing
+      pages: write # github pages publishing
+
     steps:
       - uses: actions/checkout@v4
       # https://github.com/actions/configure-pages