From 88d538cde2bb8725d566b432d1a2794580f93099 Mon Sep 17 00:00:00 2001
From: Federico Stagni <federico.stagni@cern.ch>
Date: Thu, 7 Nov 2024 10:02:53 +0100
Subject: [PATCH] fix: token write

---
 .github/workflows/deployment.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml
index b78a8cbc55d..9519458fc5c 100644
--- a/.github/workflows/deployment.yml
+++ b/.github/workflows/deployment.yml
@@ -17,6 +17,10 @@ jobs:
     name: PyPI deployment
     runs-on: "ubuntu-latest"
     if: github.event_name != 'push' || github.repository == 'DIRACGrid/DIRAC'
+    permissions:
+      id-token: write
+      attestations: write
+      contents: write
     defaults:
       run:
         shell: bash -l {0}
@@ -125,7 +129,6 @@ jobs:
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}
-          repository-url: https://upload.pypi.org/legacy/
 
   deploy_CVMFS:
     runs-on: "ubuntu-latest"