From e1e94fa7d4b291d3a1536d5f595832ff5eb8c927 Mon Sep 17 00:00:00 2001
From: Gabriel Augendre <gabriel.augendre@ovhcloud.com>
Date: Wed, 30 Oct 2024 16:23:02 +0100
Subject: [PATCH] use separate job with specific permissions for coverage
 report

---
 .github/workflows/go.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 9948658..cff2381 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -29,6 +29,13 @@ jobs:
         run: go build -v ./...
       - name: Test
         run: make test
+  coverage:
+    name: coverage
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    needs: [build]
+    steps:
       - name: Update coverage report
         uses: ncruces/go-coverage-report@v0
         with: