add permissions

CMSgov · Oct 2, 2024 · 86e3120 · 86e3120
1 parent a51ac93
commit 86e3120
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/promote.yml b/.github/workflows/promote.yml
@@ -27,7 +27,10 @@ on:
 
 jobs:
   promote:
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write    
     env:
         ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
         AWS_REGION: ${{ vars.AWS_REGION }}