github id token

lenskit · Jul 3, 2024 · f440df5 · f440df5
1 parent 8a86b91
commit f440df5
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -11,6 +11,10 @@ defaults:
 concurrency:
   group: doc-${{github.ref}}
   cancel-in-progress: true
+permissions:
+  contents: read
+  pages: write
+  id-token: write
 jobs:
   build:
     name: Build documentation
@@ -27,6 +31,7 @@ jobs:
           environment-file: docs/environment.yml
           environment-name: lkpy
           init-shell: bash
+          cache-environment: true
       - id: install
         name: 🍱 Install LensKit packages
         run: |

diff --git a/lkdev/workflows/docs.py b/lkdev/workflows/docs.py
@@ -23,6 +23,11 @@ def workflow():
             "group": "doc-${{github.ref}}",
             "cancel-in-progress": True,
         },
+        "permissions": {
+            "contents": "read",
+            "pages": "write",
+            "id-token": "write",
+        },
         "jobs": {
             "build": job_build_docs(),
             "archive": job_archive_docs(),
@@ -52,6 +57,7 @@ def stages_setup():
                 "environment-file": "docs/environment.yml",
                 "environment-name": "lkpy",
                 "init-shell": "bash",
+                "cache-environment": True,
             },
         },
         {