fix gh actions (DataDog#2682)

Author: sarah-witt

.github/workflows/master.yml

@@ -14,6 +14,9 @@ jobs:
       # Options
       standard: true
     secrets: inherit
+    # needed for codecov in test-target.yml, allows the action to get a JWT signed by Github
+    permissions:
+      id-token: write
 
   publish-test-results:
     needs:

.github/workflows/pr.yml

@@ -18,3 +18,6 @@ jobs:
       repo: extras
       python-version: "3.12"
     secrets: inherit
+    # needed for codecov in test-target.yml, allows the action to get a JWT signed by Github
+    permissions:
+      id-token: write

.github/workflows/test-agent.yml

@@ -49,3 +49,6 @@ jobs:
       agent-image-windows: "${{ inputs.agent-image-windows }}"
       agent-image-windows-py2: "${{ inputs.agent-image-windows-py2 }}"
     secrets: inherit
+    # needed for codecov in test-target.yml, allows the action to get a JWT signed by Github
+    permissions:
+      id-token: write