permissions moved

Canadian-Light-Source · Dec 19, 2024 · a6ad318 · a6ad318
1 parent 8f20e36
commit a6ad318
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/_pypi.yml b/.github/workflows/_pypi.yml
@@ -5,7 +5,8 @@ jobs:
   upload:
     runs-on: ubuntu-latest
     environment: release
-
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
       - name: Download dist artifact
         uses: actions/download-artifact@v4

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -45,5 +45,5 @@ jobs:
     # if: github.ref_type == 'tag'
     needs: dist
     uses: ./.github/workflows/_pypi.yml
-    permissions:
-      id-token: write
+    # permissions:
+    #   id-token: write