fix(deploy): use correct workflow permissions

ZcashFoundation · Mar 7, 2024 · a6a4535 · a6a4535
1 parent a170a8b
commit a6a4535
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/sub-cloudrun-deploy.yml b/.github/workflows/sub-cloudrun-deploy.yml
@@ -68,6 +68,9 @@ jobs:
     environment:
       name: ${{ inputs.environment }}
       url: ${{ steps.deploy.outputs.url }}
+    permissions:
+      contents: 'read'
+      id-token: 'write'
     steps:
       - name: Inject slug/short variables
         uses: rlespinasse/[email protected]