add another permission

.github/workflows/publish-test.yaml

@@ -10,6 +10,7 @@ jobs:
       matrix:
         python-version: [ "3.10" ]
     permissions:
+      contents: read
       id-token: write
     steps:
       - uses: actions/checkout@v4
@@ -23,7 +24,7 @@ jobs:
           pdm install --global --project .
       - name: publish
         run: |
-          pdm publish --repository https://test.pypi.org/legacy/
+          pdm publish --repository testpypi
 
 
   publish-docs:

.github/workflows/publish.yaml

@@ -11,6 +11,7 @@ jobs:
       matrix:
         python-version: [ "3.10" ]
     permissions:
+      contents: read
       id-token: write
     steps:
       - uses: actions/checkout@v4

.github/workflows/release-staging.yaml

@@ -17,6 +17,7 @@ jobs:
   publish:
     name: Publish staging release
     permissions:
+      contents: read
       id-token: write
       pages: write
     uses: ./.github/workflows/publish-test.yaml

.github/workflows/release.yaml

@@ -9,5 +9,6 @@ jobs:
   publish:
     name: Publish release
     permissions:
+      contents: read
       id-token: write
     uses: ./.github/workflows/publish.yaml