From c9e09f3f27611c973a9d95199912c9d829ed94eb Mon Sep 17 00:00:00 2001
From: John Smith <john@johnjcsmith.com>
Date: Thu, 28 Nov 2024 21:52:22 +1030
Subject: [PATCH] ci: Add id-token permission to deploy job (#150)

---
 .github/workflows/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 21e38415..1d97440e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -506,6 +506,8 @@ jobs:
   deploy-cloud:
     runs-on: ubuntu-latest
     if: ${{ needs.check_changes.outputs.deploy == 'true' && github.ref == 'refs/heads/main' }}
+    permissions:
+      id-token: write
     needs:
       [check_changes, build-app-image, build-control-plane-image]
     steps: