next: add id-token perm for provenance

Signed-off-by: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
aplosdev · Nov 5, 2024 · 6976bc3 · 6976bc3
1 parent ea268b0
commit 6976bc3
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -9,6 +9,7 @@ on:
 permissions:
   actions: write
   contents: read
+  id-token: write
 
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/unreleased-publish.yml b/.github/workflows/unreleased-publish.yml
@@ -6,6 +6,11 @@ on:
       - main
   workflow_dispatch:
 
+permissions:
+  actions: write
+  contents: read
+  id-token: write
+
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}