workflows/test-n-publish: fix perms in publish job

spine-tools · Sep 7, 2024 · bc05625 · bc05625
1 parent c2d2784
commit bc05625
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/test-n-publish.yml b/.github/workflows/test-n-publish.yml
@@ -80,7 +80,10 @@ jobs:
     strategy:
       matrix:
         pkg: ['Spine-Database-API', 'spine-engine', 'spine-items', 'Spine-Toolbox']
+        # TODO: can this be done w/o a matrix strategy?  That will be more atomic.
 
+    permissions:
+      id-token: write
     uses: ./.github/workflows/publish-wheel.yml
     with:
       pkg: ${{ matrix.pkg }}