give id-token: write permissions

erickzhao · erickzhao · commit 421280e4f598 · 2025-02-10T10:02:41.000-08:00
this is required for GHA OIDC auth
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -7,7 +7,9 @@ on:
     tags:
       - v[0-9]+.[0-9]+.[0-9]+*
 
-permissions: {}
+permissions:
+      id-token: write
+      contents: read
 
 jobs:
   docs:
