fix: permissions

magi-sche-org · Feb 25, 2024 · 6594399 · 6594399
1 parent b2e7090
commit 6594399
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/deploy-dev.yaml b/.github/workflows/deploy-dev.yaml
@@ -9,10 +9,6 @@ env:
   AWS_REGION: ap-northeast-1
   AWS_ACCOUNT_ID: 905418376731
 
-permissions:
-  id-token: write
-  contents: read
-
 jobs:
   config:
     runs-on: ubuntu-latest
@@ -29,6 +25,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       packages: write
+      id-token: write
+      contents: read
     steps:
       - name: Prepare
         id: prep
@@ -85,6 +83,9 @@ jobs:
           platforms: linux/amd64,linux/arm64
 
   deploy:
+    permissions:
+      id-token: write
+      contents: read
     needs: [config, build-and-push]
     runs-on: ubuntu-latest
     # use ecspresso