ci(.github): add proper OIDC permissions to use trusted publisher

senges · Dec 4, 2024 · 51e3f01 · 51e3f01
1 parent 803d554
commit 51e3f01
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
@@ -6,6 +6,10 @@ on:
   create:
     tags: ["v*"]
 
+permissions:
+  contents: read
+  id-token: write 
+
 jobs:
   uv-check:
     name: python