Add id-token permissions

solarwinds · Feb 28, 2024 · 5c3c1a1 · 5c3c1a1
1 parent 0acfdde
commit 5c3c1a1
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/.github/workflows/build_publish_lambda_layer_aarch64.yaml b/.github/workflows/build_publish_lambda_layer_aarch64.yaml
@@ -9,6 +9,10 @@ name: Publish APM Python lambda layer for aarch64
 on:
   workflow_call:
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   launch_arm64:
     name: Launch arm64 ec2 runners

diff --git a/.github/workflows/build_publish_pypi_and_draft_release.yaml b/.github/workflows/build_publish_pypi_and_draft_release.yaml
@@ -16,6 +16,10 @@ on:
 env:
   RELEASE_NAME: rel-${{ github.event.inputs.version }}
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   is_publishable:
     name: Check if version valid

diff --git a/.github/workflows/build_publish_testpypi.yaml b/.github/workflows/build_publish_testpypi.yaml
@@ -9,6 +9,10 @@ name: Publish to TestPyPi
 on:
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build_publish_sdist_and_x86_64:
     name: Build and publish sdist and x86_64

diff --git a/.github/workflows/verify_install.yaml b/.github/workflows/verify_install.yaml
@@ -30,6 +30,10 @@ env:
   SW_APM_SERVICE_KEY_PROD: ${{ secrets.SW_APM_SERVICE_KEY_PROD }}
   SW_APM_SERVICE_KEY_STAGING: ${{ secrets.SW_APM_SERVICE_KEY_STAGING }}
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   launch-arm64:
     runs-on: ubuntu-latest