another attempt at permissions

Author: cabutlermit

.github/workflows/dev-build.yml

@@ -12,15 +12,16 @@ on:
     paths-ignore:
       - '.github/**'
 
-permissions: read-all
+permissions:
+  actions: read
+  contents: read
+  deployments: read
+  id-token: write
+  pull-requests: read
+  statuses: read
 
 jobs:
   deploy:
-    # These permissions are needed to interact with GitHub's OIDC Token endpoint.
-    permissions:
-      contents: read
-      id-token: write
-
     name: Dev Container Deploy
     uses: mitlibraries/.github/.github/workflows/ecr-shared-deploy-dev.yml@INFRA-526
     secrets: inherit