Merge pull request #4 from ubodigat/sicherheitsupdate-bei-automation

Sicherheitsupdate bei automation

Author: ubodigat

.github/workflows/publish.yml

@@ -1,14 +1,14 @@
-name: Publish VSCode Extension
+name: Publish VS Code Extension
 
 on:
-  push:
-    tags:
-      - 'v*'   # Jede Version wie v1.0.0 triggert Release & Publish
+  workflow_dispatch:
+
+permissions:
+  contents: read
 
 jobs:
   build:
     runs-on: ubuntu-latest
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -39,7 +39,8 @@ jobs:
   release:
     needs: build
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: write
     steps:
       - name: Download artifact
         uses: actions/download-artifact@v4
@@ -56,7 +57,6 @@ jobs:
   publish:
     needs: release
     runs-on: ubuntu-latest
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -77,4 +77,4 @@ jobs:
       - name: Publish to VSCode Marketplace
         run: vsce publish --packagePath *.vsix
         env:
-          VSCE_PAT: ${{ secrets.VSCE_PAT }}
+          VSCE_PAT: ${{ secrets.VSCE_PAT }}