From f97f8978e791d8fe2a9ed795eaa746f0a5ef4b73 Mon Sep 17 00:00:00 2001
From: Arseniy Obolenskiy <gooddoog@student.su>
Date: Fri, 26 Jun 2026 07:31:29 +0200
Subject: [PATCH] [CI] Limit Pages write permissions to deploy job

---
 .github/workflows/pages.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 2534d6cd..ebf58dc3 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -4,11 +4,6 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions:
-  id-token: write
-  contents: read
-  pages: write
-
 jobs:
   build-doxygen-xml:
     runs-on: ubuntu-26.04
@@ -101,6 +96,10 @@ jobs:
       - build-sphinx
       - build-scoreboard
     runs-on: ubuntu-26.04
+    permissions:
+      id-token: write
+      contents: read
+      pages: write
     environment:
       name: github-pages
     concurrency: