Grant permissions for workflow callers

sgcarstrends · Dec 15, 2024 · d5e961e · d5e961e
1 parent 2c2d245
commit d5e961e
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/.github/workflows/sst.dev.yml b/.github/workflows/sst.dev.yml
@@ -6,6 +6,11 @@ on:
       - 'main'
       - 'release/**'
 
+
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   dev:
     uses: ./.github/workflows/sst.deploy.yml

diff --git a/.github/workflows/sst.prod.yml b/.github/workflows/sst.prod.yml
@@ -6,6 +6,10 @@ on:
       - 'v[0-9]+.[0-9]+.[0-9]+'
       - 'v[0-9]+.[0-9]+.[0-9]+-beta.[0-9]+'
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   prod:
     uses: ./.github/workflows/sst.deploy.yml

diff --git a/.github/workflows/sst.staging.yml b/.github/workflows/sst.staging.yml
@@ -8,6 +8,10 @@ on:
     tags-ignore:
       - '*'
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   staging:
     uses: ./.github/workflows/sst.deploy.yml