From c45e0df72b12e5997b24d49e838ff9d3ae76d1ba Mon Sep 17 00:00:00 2001
From: Scott Gress <scottmgress@gmail.com>
Date: Mon, 7 Apr 2025 16:16:16 -0500
Subject: [PATCH] Update permissions in workflows to be more restrictive
 (#27959)

---
 .github/workflows/generate-desktop-targets.yml  | 2 --
 .github/workflows/generate-osqueryd-targets.yml | 2 --
 2 files changed, 4 deletions(-)

diff --git a/.github/workflows/generate-desktop-targets.yml b/.github/workflows/generate-desktop-targets.yml
index 221fac8bb0..3dbe64eba8 100644
--- a/.github/workflows/generate-desktop-targets.yml
+++ b/.github/workflows/generate-desktop-targets.yml
@@ -11,10 +11,8 @@ defaults:
     shell: bash
 
 permissions:
-  contents: write
   id-token: write
   attestations: write
-  packages: write
 
 jobs:
   set-version:
diff --git a/.github/workflows/generate-osqueryd-targets.yml b/.github/workflows/generate-osqueryd-targets.yml
index 4ece3df1ba..c3a626ac9d 100644
--- a/.github/workflows/generate-osqueryd-targets.yml
+++ b/.github/workflows/generate-osqueryd-targets.yml
@@ -27,10 +27,8 @@ env:
   OSQUERY_VERSION: 5.16.0
 
 permissions:
-  contents: write
   id-token: write
   attestations: write
-  packages: write
 
 jobs:
   generate-macos: