ci: Add permissions section to ISO build

Fixes: 1b3ea7c Signed-off-by: Tim Serong <[email protected]>
tserong · Aug 9, 2024 · 43b0a1e · 43b0a1e
1 parent 1b3ea7c
commit 43b0a1e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -24,6 +24,9 @@ jobs:
     # 77G disk, which is sufficient for ISO builds.
     # The VM runners are named "x64", not "amd64" like other docker things.
     runs-on: runs-on,runner=4cpu-linux-${{ matrix.arch == 'amd64' && 'x64' || matrix.arch }},hdd=50,run-id=${{ github.run_id }}
+    permissions:
+      contents: read
+      id-token: write # for reading credential https://github.com/rancher-eio/read-vault-secrets
     steps:
     - name: Checkout code
       uses: actions/checkout@v4