OPS: Add missing permissions to publish workflow jobs

octue · Oct 19, 2023 · 9b16909 · 9b16909
1 parent d4e3d39
commit 9b16909
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
@@ -54,6 +54,9 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'skipci')"
     runs-on: ubuntu-latest
     needs: [check-semantic-version, run-tests]
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v3

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -60,7 +60,9 @@ jobs:
   publish:
     needs: release
     runs-on: ubuntu-latest
-
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v3