Use permissions in the release workflow instead of fiddling with keys… #2

	name: Release

	on:
	workflow_dispatch:
	push:
	tags:
	- "**"

	permissions: #See https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
	contents: write # Can make a release
	packages: write # Can upload packages
	pull-requests: write # Can create pull requests (if needed for brews etc.)

	jobs:
	release:
	name: Release
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	check-latest: true
	- name: Show go version
	run: go version
	- name: Release
	uses: goreleaser/goreleaser-action@v6
	with:
	version: latest
	args: release --clean
	env:
	MASTODON_CLIENT_ID: ${{ secrets.MASTODON_CLIENT_ID }}
	MASTODON_CLIENT_SECRET: ${{ secrets.MASTODON_CLIENT_SECRET }}
	MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }}

Provide feedback