Add top-level OIDC permissions to publish workflow

Co-authored-by: Ona <no-reply@ona.com>
2026-03-20 20:01:19 +00:00 · 2026-03-14 01:23:05 +00:00
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,6 +4,10 @@ on:
  release:
    types: [published]
 permissions:
  id-token: write  # Required for OIDC
  contents: read
 jobs:
  publish:
    runs-on: ubuntu-latest