Updating workflow permissions

frasermolyneux · Nov 9, 2023 · bd8fd7c · bd8fd7c
1 parent a1c61c2
commit bd8fd7c
Show file tree

Hide file tree

Showing 5 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/codequality.yml b/.github/workflows/codequality.yml
@@ -3,7 +3,6 @@ name: Code Quality
 on: push
 
 permissions:
-  id-token: write # This is required for requesting the JWT
   contents: read # This is required for actions/checkout
   actions: read # Required by CodeQL
   security-events: write # Required by CodeQL

diff --git a/.github/workflows/feature-development.yml b/.github/workflows/feature-development.yml
@@ -7,6 +7,7 @@ on:
       - "feature/*"
 
 permissions:
+  id-token: write # This is required for Az CLI Login
   contents: read # This is required for actions/checkout
 
 jobs:

diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
@@ -7,7 +7,7 @@ on:
       - "integration/*"
 
 permissions:
-  id-token: write # This is required for requesting the JWT
+  id-token: write # This is required for Az CLI Login
   contents: read # This is required for actions/checkout
 
 jobs:

diff --git a/.github/workflows/pull-request-validation.yml b/.github/workflows/pull-request-validation.yml
@@ -7,6 +7,7 @@ on:
       - main
 
 permissions:
+  id-token: write # This is required for Az CLI Login
   contents: read # This is required for actions/checkout
 
 concurrency: # This is required to prevent multiple runs of the same workflow from running at the same time.

diff --git a/.github/workflows/release-to-production.yml b/.github/workflows/release-to-production.yml
@@ -9,6 +9,7 @@ on:
     - cron: "0 3 * * 3" # Every Wednesday at 3am
 
 permissions:
+  id-token: write # This is required for Az CLI Login
   contents: read # This is required for actions/checkout
 
 concurrency: # This is required to prevent multiple runs of the same workflow from running at the same time.