Grant hanzoai/ci the run's ID token [skip ci]

2026-10-22 17:20:17 +00:00 · 2026-09-30 07:18:25 -07:00
parent aad1f306c5
commit dbb2012313
1 changed files with 4 additions and 0 deletions
@@ -12,6 +12,10 @@ on:
 jobs:
  cicd:
    uses: hanzoai/ci/.github/workflows/build.yml@v1
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
    # No `mode:`, so the door builds it — one BuildKit Job per architecture, each
    # on a node of that architecture. buildx was pinned here because this image's
    # context was `site` and the door refuses a context below the repo root; the