Move token permissions for deployment in file (#38)

projectglove · Aug 17, 2024 · 07aa9e0 · 07aa9e0
1 parent f2929e7
commit 07aa9e0
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,6 +8,11 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
+# To double check
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -65,9 +70,6 @@ jobs:
           role-to-assume: arn:aws:iam::381491931967:role/GitHubAction-EC2-RO
           role-session-name: deploy-role-session
           aws-region: us-east-2
-          # To double check
-          id-token: write # This is required for requesting the JWT
-          contents: read  # This is required for actions/checkout