Grant hanzoai/ci the run's ID token [skip ci]

2026-10-04 02:04:03 +00:00 · 2026-09-30 07:18:58 -07:00
parent 342dc736c2
commit 6c059d8a31
1 changed files with 4 additions and 0 deletions
@@ -25,4 +25,8 @@ jobs:
    # exists, so it reads as silence rather than as a failure. hanzoai/ci
    # publishes build.yml at both paths from every tag; @v1 is unchanged.
    uses: hanzoai/ci/.github/workflows/build.yml@v1
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
    secrets: inherit