debuggingg g (#24)

* debuggingg
g

* playing with permissions

* reverting task

* only changing permissions in the job needed

* permissions needed in two spots

.github/workflows/build-and-deploy.yml

@@ -11,10 +11,6 @@ on:
         type: boolean
         default: false
 
-permissions:
-  id-token: write
-  contents: read
-
 jobs:
   build_hugo:
     runs-on: ubuntu-latest
@@ -133,6 +129,10 @@ jobs:
     runs-on: ubuntu-latest
     environment: production
     name: Provision Azure
+    permissions:
+      id-token: write
+      contents: read
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v2
@@ -163,6 +163,10 @@ jobs:
     runs-on: ubuntu-latest
     environment: production
     name: Deploy SWA
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: write
     steps:
       - name: Azure Login
         uses: azure/login@v1