From 01e38b597e46b22b59cc7d31ea53af5a2b0edb2e Mon Sep 17 00:00:00 2001
From: Andrea Amorosi <dreamorosi@gmail.com>
Date: Tue, 20 Feb 2024 14:47:00 +0100
Subject: [PATCH] chore(ci): fix release workflow permission

---
 .github/workflows/publish_layer.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish_layer.yml b/.github/workflows/publish_layer.yml
index 59d9e364f3..ae60cfaed9 100644
--- a/.github/workflows/publish_layer.yml
+++ b/.github/workflows/publish_layer.yml
@@ -57,6 +57,7 @@ jobs:
     uses: ./.github/workflows/reusable_deploy_layer_stack.yml
     permissions:
       id-token: write
+      contents: read
     with:
       stage: "BETA"
       artifact-name: "cdk-layer-artifact"
@@ -71,6 +72,7 @@ jobs:
     uses: ./.github/workflows/reusable_deploy_layer_stack.yml
     permissions:
       id-token: write
+      contents: read
     with:
       stage: "PROD"
       artifact-name: "cdk-layer-artifact"