Maybe we need permissions in the top level script

Author: timyates

.github/workflows/gradle-build-develop.yml

@@ -11,6 +11,9 @@ on:
       - 'dependabot/**/*'
 jobs:
   build-and-test:
+    permissions:
+      contents: 'read'
+      id-token: 'write'
     runs-on: ubuntu-latest
     steps:
       - name: '🛒 Checkout'