ci(docker): add id-token: write to caller permissions

The reusable docker-build.yml jobs declare id-token: write; a caller whose
top-level permissions are narrower is rejected by GitHub at workflow validation
(the 0s 'workflow file issue' failure — present since the workflow was added).
Every working caller of this reusable workflow grants id-token: write. This is
the actual parse-stage fix (the runner-input + secret fixes were also needed for
the build to RUN, but this is why it never started).
This commit is contained in:
2026-06-22 02:51:53 -07:00
parent 57ab21687d
commit 4afe6b7472
+1
View File
@@ -8,6 +8,7 @@ on:
permissions:
contents: read
packages: write
id-token: write
jobs:
docker: