CI fixes

risc0 · Mar 21, 2024 · 6245443 · 6245443
1 parent 7c77acf
commit 6245443
Showing 1 changed file with 11 additions and 9 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -5,16 +5,21 @@ on:
     branches: [ "main" ]
   pull_request:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+# this is needed to gain access via OIDC to the S3 bucket for caching
+permissions:
+  id-token: write
+  contents: read
+
 env:
   CARGO_TERM_COLOR: always
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  RISC0_VERSION: 0.21.0
+  RISC0_VERSION: "^0.21"
   RISC0_TOOLCHAIN_VERSION: v2024-02-08.1
 
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
 jobs:
   test:
     name: test
@@ -26,10 +31,7 @@ jobs:
         submodules: recursive
     - uses: risc0/risc0/.github/actions/[email protected]
     - uses: risc0/risc0/.github/actions/[email protected]
-    - uses: risc0/cargo-install@v1
-      with:
-        crate: cargo-binstall
-    - run: cargo binstall -y --force cargo-risczero@${{ env.RISC0_VERSION }}
+    - run: cargo install --force --locked cargo-risczero@$RISC0_VERSION
     - run: cargo risczero install --version $RISC0_TOOLCHAIN_VERSION
     - run: cargo test --workspace --all-targets -F ef-tests,debug-guest-build