Document GitHub Actions OIDC token permission

oursky · Jun 26, 2023 · 35b72f1 · 35b72f1
1 parent 8e9ec09
commit 35b72f1
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/docs/guides/features/github-actions-integration.md b/docs/guides/features/github-actions-integration.md
@@ -7,8 +7,17 @@ To deploy from GitHub Actions, first configure the app to accept GitHub Actions
 running in the repo as `deployer` permission. See [Access Control](./access-control.md)
 guide for details.
 
-After configuring access control, install `pageship` command in workflow and
-deploy directly.
+Then, enable OIDC token in GitHub Actions workflow by granting `id-token`
+permission to workflow jobs:
+```yaml
+jobs:
+  <job-name>:
+    permissions:
+      contents: read
+      id-token: write
+```
+
+Finally, install `pageship` command in workflow and deploy directly.
 
 ```
 docker run --rm \