use separate job with specific permissions for coverage report

Crocmagnon · Crocmagnon · commit e1e94fa7d4b2 · 2024-10-30T16:23:02.000+01:00
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -29,6 +29,13 @@ jobs:
         run: go build -v ./...
       - name: Test
         run: make test
+  coverage:
+    name: coverage
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    needs: [build]
+    steps:
       - name: Update coverage report
         uses: ncruces/go-coverage-report@v0
         with:
