From a7ba10f01f57153d53aca8d1a82b1d041b746dbb Mon Sep 17 00:00:00 2001
From: hikari <hikari@git.parchlinux.com>
Date: Sun, 16 Feb 2025 09:58:10 -0500
Subject: [PATCH] Update .forgejo/workflows/build.yaml

---
 .forgejo/workflows/build.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.forgejo/workflows/build.yaml b/.forgejo/workflows/build.yaml
index d16f8f9..3d03ddf 100644
--- a/.forgejo/workflows/build.yaml
+++ b/.forgejo/workflows/build.yaml
@@ -8,8 +8,8 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: archlinux/archlinux:base-devel
-      privileged: true
-
+    permissions:
+      contents: read
     env:
       Desktop: "template"
     steps:
@@ -42,5 +42,5 @@ jobs:
           fi
       - name: Deploy files
         run: |
-          sshpass -p "${{ env.SSHPASS }}" ssh -o StrictHostKeyChecking=no parch@${{ env.SSHHOST }} "rm -rf ${{ env.REMOTE_DIR }} && mkdir -p ${{ env.REMOTE_DIR }}"
-          sshpass -p "${{ env.SSHPASS }}" rsync -avz out/ParchLinux-${{ env.Desktop }}-latest.iso out/md5sum.txt parch@${{ env.SSHHOST }}:${{ env.REMOTE_DIR }}
+          sshpass -p "${{ secrets.SSHPASS }}" ssh -o StrictHostKeyChecking=no parch@${{ secrets.SSHHOST }} "rm -rf ${{ env.REMOTE_DIR }} && mkdir -p ${{ env.REMOTE_DIR }}"
+          sshpass -p "${{ secrets.SSHPASS }}" rsync -avz out/ParchLinux-${{ env.Desktop }}-latest.iso out/md5sum.txt parch@${{ secrets.SSHHOST }}:${{ env.REMOTE_DIR }}