chore: grant duvet action more permissions (aws#4854)

lrstewart · Oct 21, 2024 · 9cd117f · 9cd117f
1 parent b293f3d
commit 9cd117f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/ci_compliance.yml b/.github/workflows/ci_compliance.yml
@@ -9,6 +9,10 @@ on:
     types: [checks_requested]
     branches: [main]
 
+permissions:
+  contents: read  # This is required for actions/checkout
+  id-token: write # This is required for requesting the JWT/OIDC
+
 jobs:
   duvet:
     runs-on: ubuntu-latest