From 3d2c2442bb5f0befee6895beffce4928a98b453c Mon Sep 17 00:00:00 2001
From: David McKee <david.mckee@dxw.com>
Date: Wed, 21 Aug 2024 16:00:24 +0100
Subject: [PATCH] Move permissions to jobs level

---
 .github/workflows/publish.yml | 2 ++
 README.md                     | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 46f61b63..2617c039 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,6 +6,8 @@ on:
       - v*
 
 jobs:
+  permissions:
+    id-token: write
   build-n-publish:
     name: Build and publish Python distributions to PyPI
     runs-on: ubuntu-latest
diff --git a/README.md b/README.md
index 7ac7c101..8d4b3c85 100644
--- a/README.md
+++ b/README.md
@@ -63,3 +63,5 @@ To create a release:
 7. Tag the merge commit on `main` with `v{major}.{minor}.{patch}` and push the tag
 8. Create a release in [Github releases](https://github.com/nationalarchives/ds-caselaw-custom-api-client/releases)
    using the created tag
+
+If the release fails to push to PyPI, you can delete the tag with `git pull`, `git push --delete origin v1.2.3` and try again.