From e8ef2899ad4c174a876788ad815e2c912f3b3e75 Mon Sep 17 00:00:00 2001 From: Jose Corella Date: Mon, 16 Feb 2026 11:33:12 -0800 Subject: [PATCH 1/3] chore(ci): fix daily and nightly ci --- .github/workflows/daily_ci.yml | 4 ++++ .github/workflows/nighly_dafny.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.github/workflows/daily_ci.yml b/.github/workflows/daily_ci.yml index c5e7dc1c5..d91a1f27d 100644 --- a/.github/workflows/daily_ci.yml +++ b/.github/workflows/daily_ci.yml @@ -6,6 +6,10 @@ on: - cron: "00 15 * * 1-5" workflow_dispatch: +permissions: + contents: read + id-token: write + jobs: getVersion: uses: ./.github/workflows/dafny_version.yaml diff --git a/.github/workflows/nighly_dafny.yml b/.github/workflows/nighly_dafny.yml index b27e29c26..fc6165c2e 100644 --- a/.github/workflows/nighly_dafny.yml +++ b/.github/workflows/nighly_dafny.yml @@ -11,6 +11,10 @@ on: - cron: "30 16 * * *" workflow_dispatch: +permissions: + id-token: write + contents: read + jobs: dafny-nightly-verification: # Don't run the cron builds on forks From ed675153baeea870d4ab6ce695d269ffc8ef5e93 Mon Sep 17 00:00:00 2001 From: Jose Corella Date: Mon, 16 Feb 2026 11:35:41 -0800 Subject: [PATCH 2/3] m --- .github/workflows/pull.yml | 4 ++++ .github/workflows/push.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml index fca43b3a3..abb30d0f5 100644 --- a/.github/workflows/pull.yml +++ b/.github/workflows/pull.yml @@ -4,6 +4,10 @@ name: PR CI on: pull_request: +permissions: + id-token: write + contents: read + jobs: getVersion: uses: ./.github/workflows/dafny_version.yaml diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 386dded5d..10605b923 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -6,6 +6,10 @@ on: branches: - main +permissions: + id-token: write + contents: read + jobs: getVersion: uses: ./.github/workflows/dafny_version.yaml From 16225fffa769f9e3f548a0dfa4e06fd81b09114c Mon Sep 17 00:00:00 2001 From: Jose Corella Date: Thu, 19 Feb 2026 11:56:15 -0800 Subject: [PATCH 3/3] m --- .github/workflows/ci_static-analysis.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci_static-analysis.yaml b/.github/workflows/ci_static-analysis.yaml index bc9ff6833..559c3268e 100644 --- a/.github/workflows/ci_static-analysis.yaml +++ b/.github/workflows/ci_static-analysis.yaml @@ -9,4 +9,4 @@ jobs: steps: - uses: actions/checkout@v6 - name: not-grep - uses: mattsb42-meta/not-grep@1.0.0 + uses: mattsb42-meta/not-grep@1.0.1