chore: add missing permissions to deployment workflows

nearform · Jan 24, 2025 · 1503cf9 · 1503cf9
1 parent 5e32954
commit 1503cf9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -10,6 +10,9 @@ jobs:
     uses: ./.github/workflows/deploy-job.yml
     with:
       environment: dev
+    permissions:
+      id-token: write
+      contents: read
     secrets:
       gcp_provider_name: ${{ secrets.GCP_PROVIDER_NAME }}
       gcp_sa_email: ${{ secrets.GCP_SA_EMAIL }}

diff --git a/.github/workflows/production-deploy.yml b/.github/workflows/production-deploy.yml
@@ -10,6 +10,9 @@ jobs:
     uses: ./.github/workflows/deploy-job.yml
     with:
       environment: production
+    permissions:
+      id-token: write
+      contents: read
     secrets:
       gcp_provider_name: ${{ secrets.GCP_PROVIDER_NAME }}
       gcp_sa_email: ${{ secrets.GCP_SA_EMAIL }}