MLPAB-2167 add id-token permissions to cleanup job (#1259)

ministryofjustice · May 23, 2024 · b5fcbfe · b5fcbfe
1 parent 4cbd3d6
commit b5fcbfe
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 7 deletions.
diff --git a/.github/workflows/workflow_pr.yml b/.github/workflows/workflow_pr.yml
@@ -6,16 +6,16 @@ on:
       - main
 
 permissions:
-  id-token: write
-  contents: write
-  security-events: write
-  pull-requests: write
   actions: none
   checks: none
+  contents: write
   deployments: none
+  id-token: write
   issues: write
   packages: none
+  pull-requests: write
   repository-projects: none
+  security-events: write
   statuses: none
 
 defaults:

diff --git a/.github/workflows/workflow_terraform_environment_cleanup.yml b/.github/workflows/workflow_terraform_environment_cleanup.yml
@@ -6,15 +6,16 @@ on:
     - cron: '0 * * * *'
 
 permissions:
-  contents: read
-  security-events: none
-  pull-requests: none
   actions: none
   checks: none
+  contents: read
   deployments: none
+  id-token: write
   issues: none
   packages: none
+  pull-requests: none
   repository-projects: none
+  security-events: none
   statuses: none
 
 jobs: