@@ -328,6 +328,9 @@ jobs:
328328 needs : [ versioning, build-docker-image-ubuntu-x86_64 ]
329329 strategy :
330330 fail-fast : false
331+ permissions :
332+ id-token : write
333+ contents : read
331334 steps :
332335 - name : Checkout
333336 uses : actions/checkout@v2
@@ -373,6 +376,9 @@ jobs:
373376 needs : [ versioning, build-docker-image-ubuntu-aarch64 ]
374377 strategy :
375378 fail-fast : false
379+ permissions :
380+ id-token : write
381+ contents : read
376382 steps :
377383 - name : Checkout
378384 uses : actions/checkout@v2
@@ -415,6 +421,9 @@ jobs:
415421 if : ${{ false }} # Disabled for now as local proxy builds take too long. Re-enable if binary or image becomes available.
416422 # versioning output is needed for the image tag
417423 needs : [ versioning, build-docker-image-ubuntu-armv7 ]
424+ permissions :
425+ id-token : write
426+ contents : read
418427 steps :
419428 - name : Checkout
420429 uses : actions/checkout@v2
@@ -458,6 +467,9 @@ jobs:
458467 if : (github.event_name == 'push') || ((github.event_name == 'pull_request') && (github.event.pull_request.head.repo.full_name != github.repository))
459468 # versioning output is needed for the image tag
460469 needs : [ versioning, build-docker-image-amazonlinux-x86_64 ]
470+ permissions :
471+ id-token : write
472+ contents : read
461473 strategy :
462474 fail-fast : false
463475 steps :
@@ -502,6 +514,9 @@ jobs:
502514 if : (github.event_name == 'push') || ((github.event_name == 'pull_request') && (github.event.pull_request.head.repo.full_name != github.repository))
503515 # versioning output is needed for the image tag
504516 needs : [ versioning, build-docker-image-amazonlinux-aarch64 ]
517+ permissions :
518+ id-token : write
519+ contents : read
505520 strategy :
506521 fail-fast : false
507522 steps :
@@ -547,6 +562,9 @@ jobs:
547562# if: (github.event_name == 'push') || ((github.event_name == 'pull_request') && (github.event.pull_request.head.repo.full_name != github.repository))
548563 # versioning output is needed for the image tag
549564 needs : [ versioning, build-docker-image-ubi8-x86_64 ]
565+ permissions :
566+ id-token : write
567+ contents : read
550568 strategy :
551569 fail-fast : false
552570 steps :
@@ -597,6 +615,9 @@ jobs:
597615 fail-fast : false
598616 matrix :
599617 architecture : [x86_64, aarch64]
618+ permissions :
619+ id-token : write
620+ contents : read
600621 steps :
601622 - name : Checkout
602623 uses : actions/checkout@v2
0 commit comments