From d2dae89886eaa7815bbdd90a42bbd9538f85d62f Mon Sep 17 00:00:00 2001
From: Arseniy Obolenskiy <gooddoog@student.su>
Date: Fri, 26 Jun 2026 07:31:29 +0200
Subject: [PATCH] [CI] Limit Pages write permissions to deploy job

---
 .github/workflows/pages.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 2534d6cd..515e1661 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -5,9 +5,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  id-token: write
   contents: read
-  pages: write
 
 jobs:
   build-doxygen-xml:
@@ -101,6 +99,10 @@ jobs:
       - build-sphinx
       - build-scoreboard
     runs-on: ubuntu-26.04
+    permissions:
+      id-token: write
+      contents: read
+      pages: write
     environment:
       name: github-pages
     concurrency: