Adding required permission for the jobs

Signed-off-by: Alex Co <alex.tuan@mindvalley.com>
mindvalley · Mar 25, 2024 · 0db9477 · 0db9477
1 parent 1c34253
commit 0db9477
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/gar-build-push-backend-container-on-tag.yml b/.github/workflows/gar-build-push-backend-container-on-tag.yml
@@ -13,6 +13,10 @@ env:
 
 jobs:
   build-and-push:
+    permissions:
+      contents: read
+      id-token: write
+
     runs-on: ubuntu-latest
 
     steps:

diff --git a/.github/workflows/gar-build-push-model-server-container-on-tag.yml b/.github/workflows/gar-build-push-model-server-container-on-tag.yml
@@ -13,6 +13,10 @@ env:
 
 jobs:
   build-and-push:
+    permissions:
+      contents: read
+      id-token: write
+
     runs-on: ubuntu-latest
 
     steps:

diff --git a/.github/workflows/gar-build-push-web-container-on-tag.yml b/.github/workflows/gar-build-push-web-container-on-tag.yml
@@ -13,6 +13,10 @@ env:
 
 jobs:
   build-and-push:
+    permissions:
+      contents: read
+      id-token: write
+
     runs-on: ubuntu-latest
 
     steps: