Allow read for id-token

ministryofjustice · Jan 9, 2025 · 9ba6290 · 9ba6290
1 parent d04abc6
commit 9ba6290
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/oracle-observer-image-build.yml b/.github/workflows/oracle-observer-image-build.yml
@@ -169,8 +169,9 @@ jobs:
     name: Publish image
     needs: [build-observer-image, scan-observer-image]
     permissions:
-      contents: write
+      contents: read
       packages: write
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code