Set explicit write permissions for publish step

Signed-off-by: Jordan Borean <jborean93@gmail.com>
pythongssapi · Aug 29, 2023 · b71bf97 · b71bf97
1 parent 7c95792
commit b71bf97
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -263,8 +263,8 @@ jobs:
 
     runs-on: ubuntu-latest
     permissions:
-      # IMPORTANT: this permission is mandatory for trusted publishing
-      id-token: write
+      id-token: write  # Needed for OIDC publishing
+      contents: read|write  # Needed for github-pages-deploy-action and other repo write tasks
 
     steps:
     - name: Check out code