From 5e64a8afd74490f93ab498823264a633a879f356 Mon Sep 17 00:00:00 2001 From: Hiroshi Hatake Date: Wed, 10 Jun 2026 15:10:02 +0900 Subject: [PATCH] github: workflows: Adjust permissions to be efficient privileges Signed-off-by: Hiroshi Hatake --- .github/workflows/pr-integration-test.yaml | 1 + .github/workflows/pr-package-tests.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/pr-integration-test.yaml b/.github/workflows/pr-integration-test.yaml index bb68fba7666..dbf089135cd 100644 --- a/.github/workflows/pr-integration-test.yaml +++ b/.github/workflows/pr-integration-test.yaml @@ -55,6 +55,7 @@ jobs: if: needs.pr-integration-test-build.result == 'success' permissions: contents: read + packages: read uses: ./.github/workflows/call-run-integration-test.yaml with: image_name: ghcr.io/${{ github.repository }}/pr-${{ github.event.pull_request.number }} diff --git a/.github/workflows/pr-package-tests.yaml b/.github/workflows/pr-package-tests.yaml index 42c71446e32..26f8a6f40d0 100644 --- a/.github/workflows/pr-package-tests.yaml +++ b/.github/workflows/pr-package-tests.yaml @@ -47,6 +47,7 @@ jobs: permissions: contents: read packages: write + id-token: write uses: ./.github/workflows/call-build-images.yaml with: version: pr-${{ github.event.pull_request.number }}