From 4566d6604486d130e916cb8352effed8bc7a7b78 Mon Sep 17 00:00:00 2001
From: Jake Macdonald <jakemac@google.com>
Date: Mon, 10 Jul 2023 17:57:44 +0000
Subject: [PATCH] add permissions

---
 .github/workflows/publish.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index c9e001e..68d0522 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -16,3 +16,6 @@ jobs:
     with:
       # Protected github deployment environment, requires approval to publish.
       environment: pub.dev
+    permissions:
+      id-token: write
+      pull-requests: write