try moving perms

lukeshay · Aug 13, 2023 · 0ad3d6d · 0ad3d6d
1 parent 168564e
commit 0ad3d6d
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 4 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -12,9 +12,15 @@ permissions:
 jobs:
   validate:
     uses: ./.github/workflows/verify.yml
+    permissions:
+      contents: read
+      id-token: write
   deploy:
     needs:
       - validate
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-22.04
     environment: production
     steps:

diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
@@ -4,13 +4,12 @@ on:
   pull_request:
   workflow_call:
 
-permissions:
-  id-token: write
-  contents: read
-
 jobs:
   validate:
     name: ${{ matrix.cmd }}
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-22.04
     environment: production
     strategy: