CI: update permissions on workflows which get external secrets (#104792)

update permissions
2025-05-02 13:31:59 -05:00
parent 65ff484e28
commit 06f15ef754
3 changed files with 3 additions and 0 deletions
@@ -63,6 +63,7 @@ jobs:
      DRY_RUN: ${{ inputs.dry_run }}
    runs-on: ubuntu-latest
    permissions:
+      id-token: write
      contents: write
      pull-requests: write
    steps:
@@ -20,6 +20,7 @@ permissions: {}
 jobs:
  dispatch-job:
    permissions:
+      id-token: write
      contents: read
      actions: write
    env:
@@ -17,6 +17,7 @@ jobs:
  dispatch-job:
    runs-on: ubuntu-latest
    permissions:
+      id-token: write
      contents: read
      actions: write
    env: