Grant hanzoai/ci the run's ID token [skip ci]

2026-10-21 03:41:50 +00:00 · 2026-09-30 07:16:40 -07:00
parent 6d4aff6caa
commit f65539d790
1 changed files with 4 additions and 0 deletions
@@ -42,6 +42,10 @@ concurrency:
 jobs:
  cicd:
    uses: hanzoai/ci/.github/workflows/build.yml@v2
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
    # The two platforms hanzo.yml declares, and the only mode that can deliver
    # them. A run is one runner and a runner is one machine, so buildx builds the
    # architecture it is and refuses the other rather than emulating it. The door