From b75494fbd594c329eee54535b0bb9754bc7458d8 Mon Sep 17 00:00:00 2001
From: Dacheng Xu <dx2227@columbia.edu>
Date: Mon, 22 Apr 2024 15:41:02 -0400
Subject: [PATCH] Add write permission to `id-token` (#436)

---
 .github/workflows/Pypi.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/Pypi.yml b/.github/workflows/Pypi.yml
index 0633b7a1..204567d5 100644
--- a/.github/workflows/Pypi.yml
+++ b/.github/workflows/Pypi.yml
@@ -8,18 +8,23 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       # Setup steps
       - name: Setup python
         uses: actions/setup-python@v5
         with:
           python-version: '3.9'
+
       - name: Checkout repo
         uses: actions/checkout@v3
+
       - name: Install dependencies
         run: pip install wheel
+
       - name: Build package
         run: python setup.py sdist bdist_wheel
-      # Do the publish
+
       - name: Publish a Python distribution to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1