workflow permissions

jkuball · Dec 24, 2024 · 7c2ceac · 7c2ceac
1 parent a946088
commit 7c2ceac
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.github/workflows/book.yaml b/.github/workflows/book.yaml
@@ -3,7 +3,8 @@ jobs:
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
     permissions:
-      contents: write
+      id-token: write
+      pages: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4

diff --git a/cells/repository/configs.nix b/cells/repository/configs.nix
@@ -31,7 +31,10 @@ in
       jobs.deploy = {
         runs-on = "ubuntu-latest";
         concurrency.group = "\${{ github.workflow }}-\${{ github.ref }}";
-        permissions.contents = "write";
+        permissions = {
+          id-token = "write";
+          pages = "write";
+        };
         steps = [
           { uses = "actions/checkout@v4"; }
           { uses = "nixbuild/nix-quick-install-action@v29"; }