ci: add id-token: write to caller permissions

Required for hanzoai/.github/.github/workflows/docker-build.yml@main — without it the workflow_call dies as startup_failure with no jobs dispatched. Caller permissions are a CEILING.
2026-05-07 09:11:51 -07:00
parent f7c43a4c2a
commit be7282458e
1 changed files with 5 additions and 0 deletions
@@ -8,6 +8,11 @@ on:
    branches: [main]
  workflow_dispatch:

+permissions:
+  contents: read
+  packages: write
+  id-token: write
+
 jobs:
  lint-and-vet:
    runs-on: hanzo-build-linux-amd64