From df67b2a4ba43b1831bb96d5622f299b7ade1c477 Mon Sep 17 00:00:00 2001
From: Alex Lovell-Troy <alovelltroy@lanl.gov>
Date: Fri, 22 Nov 2024 15:40:25 -0500
Subject: [PATCH] fix: Update permissions in hydrun CI workflow for build
 provenance action

---
 .github/workflows/hydrun.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/hydrun.yaml b/.github/workflows/hydrun.yaml
index ef8362d..0f6a60a 100644
--- a/.github/workflows/hydrun.yaml
+++ b/.github/workflows/hydrun.yaml
@@ -1,5 +1,7 @@
 name: hydrun CI
 
+permissions: write-all # Necessary for the generate-build-provenance action
+
 on:
   push:
   pull_request:
@@ -68,7 +70,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
-      id-token: write
     needs: build-linux
 
     steps: