From 06a213dd003beb2d373631531faacc788f583458 Mon Sep 17 00:00:00 2001
From: Ismo Vuorinen <ismo@ivuorinen.net>
Date: Fri, 28 Mar 2025 00:01:21 +0200
Subject: [PATCH] fix(ci): fix checkov errors

---
 .github/workflows/release-new-action-version.yml | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/release-new-action-version.yml b/.github/workflows/release-new-action-version.yml
index 2291fa9..1e0c119 100644
--- a/.github/workflows/release-new-action-version.yml
+++ b/.github/workflows/release-new-action-version.yml
@@ -5,24 +5,20 @@ name: Release new action version
 on:
   release:
     types: [released]
-  workflow_dispatch:
-    inputs:
-      TAG_NAME:
-        description: 'Tag name that the major tag will point to'
-        required: true
 
 env:
-  TAG_NAME: ${{ github.event.inputs.TAG_NAME || github.event.release.tag_name }}
+  TAG_NAME: ${{ github.event.release.tag_name }}
 
-permissions:
-  contents: write
+permissions: read-all
 
 jobs:
   update_tag:
-    name: Update the major tag to include the ${{ github.event.inputs.TAG_NAME || github.event.release.tag_name }} changes
+    name: Update the major tag to include the ${{ env.TAG_NAME }} changes
     environment:
       name: releaseNewActionVersion
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Update the ${{ env.TAG_NAME }} tag
         uses: actions/publish-action@f784495ce78a41bac4ed7e34a73f0034015764bb # v0.3.0