add permissions to child job

rapidsai · Jun 26, 2024 · bd56e4b · bd56e4b
1 parent 930f0db
commit bd56e4b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
@@ -71,6 +71,12 @@ jobs:
       build_type: pull-request
       script: ci/test_wheel.sh
   wheel-publish:
+    permissions:
+      actions: read
+      contents: read
+      id-token: write
+      packages: read
+      pull-requests: read
     needs: wheel-build
     secrets: inherit
     uses: rapidsai/shared-workflows/.github/workflows/wheels-publish.yaml@test_pypi_trusted_publish