From e98fe36a795b1c28c18f30feb6a89a4fef6332e2 Mon Sep 17 00:00:00 2001
From: Bart Louwers <bart@emeel.net>
Date: Thu, 19 Oct 2023 21:09:46 +0200
Subject: [PATCH] Add id-token permissions to workflows (#1783)

---
 .github/workflows/linux-ci.yml  | 3 +++
 .github/workflows/pr-bloaty.yml | 1 +
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/linux-ci.yml b/.github/workflows/linux-ci.yml
index 74f8d90e2..8e08f8494 100644
--- a/.github/workflows/linux-ci.yml
+++ b/.github/workflows/linux-ci.yml
@@ -15,6 +15,9 @@ concurrency:
   # INFO: We are cancelling the concurrency group if the change is on PR. For workflow dispatch, this will not work.
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
+permissions:
+  id-token: write      # This is required for requesting the AWS JWT
+
 jobs:
   pre_job:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/pr-bloaty.yml b/.github/workflows/pr-bloaty.yml
index 98e32b8c7..b42063d52 100644
--- a/.github/workflows/pr-bloaty.yml
+++ b/.github/workflows/pr-bloaty.yml
@@ -14,6 +14,7 @@ env:
 
 permissions:
   pull-requests: write
+  id-token: write      # This is required for requesting the AWS JWT
 
 jobs:
   pr-bloaty: