Add minimum token permissions for all github workflow files

otelbot[bot] · otelbot[bot] · commit 30f9db322c21 · 2025-07-12T19:32:26.000-07:00
diff --git a/.github/workflows/layer-publish.yml b/.github/workflows/layer-publish.yml
@@ -42,11 +42,12 @@ on:
         type: string
 
 permissions:
-  id-token: write
   contents: read
 
 jobs:
   publish_layer:
+    permissions:
+      id-token: write # required for AWS OIDC authentication
     runs-on: ubuntu-latest
 
     steps:
