From da4d06c5abf2fcbc1addcf64d456ee88ea100f3c Mon Sep 17 00:00:00 2001
From: dkanada <dkanada@users.noreply.github.com>
Date: Fri, 3 Apr 2026 20:17:31 +0900
Subject: move permissions block to publish job

---
 .github/workflows/openapi-merge.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/openapi-merge.yml b/.github/workflows/openapi-merge.yml
index 954a835b41..2421c09ad7 100644
--- a/.github/workflows/openapi-merge.yml
+++ b/.github/workflows/openapi-merge.yml
@@ -6,14 +6,12 @@ on:
     tags:
       - 'v*'
 
-permissions:
-  contents: read
-  actions: read
-
 jobs:
   publish-openapi:
     name: OpenAPI - Publish Artifact
     uses: ./.github/workflows/openapi-generate.yml
+    permissions:
+      contents: read
     with:
       ref: ${{ github.sha }}
       repository: ${{ github.repository }}
-- 
cgit v1.2.3