helm publish needs id-token permissions

pdabelf5 · pdabelf5 · commit ba13ff977e3e · 2025-11-12T14:28:57.000Z
diff --git a/.github/workflows/image-promotion.yml b/.github/workflows/image-promotion.yml
@@ -267,6 +267,7 @@ jobs:
     permissions:
       contents: write # for pushing to Helm Charts repository
       packages: write # for helm to push to GHCR
+      id-token: write
     secrets: inherit
 
   certify-openshift-images:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -318,6 +318,7 @@ jobs:
     permissions:
       contents: write # for pushing to Helm Charts repository
       packages: write # for helm to push to GHCR
+      id-token: write
     secrets: inherit
 
   certify-openshift-images:
