From 170fc53355cb611143e2d0b06de07d551a9c0b49 Mon Sep 17 00:00:00 2001 From: Jack Zhang Date: Tue, 21 Jan 2025 15:18:41 -0800 Subject: [PATCH 1/3] Upgrade ci linux job --- .github/workflows/_android.yml | 2 +- .github/workflows/_unittest.yml | 2 +- .github/workflows/android-perf.yml | 4 +-- .../workflows/android-release-artifacts.yml | 2 +- .github/workflows/doc-build.yml | 4 +-- .github/workflows/lint.yml | 4 +-- .github/workflows/periodic.yml | 2 +- .github/workflows/pull.yml | 36 +++++++++---------- .github/workflows/trunk.yml | 8 ++--- 9 files changed, 32 insertions(+), 32 deletions(-) diff --git a/.github/workflows/_android.yml b/.github/workflows/_android.yml index 96fdfd51feb..11f6975979d 100644 --- a/.github/workflows/_android.yml +++ b/.github/workflows/_android.yml @@ -7,7 +7,7 @@ on: jobs: build-llm-demo: name: build-llm-demo - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-clang12-android diff --git a/.github/workflows/_unittest.yml b/.github/workflows/_unittest.yml index 74ea5ca7bcc..9ae36516c3d 100644 --- a/.github/workflows/_unittest.yml +++ b/.github/workflows/_unittest.yml @@ -14,7 +14,7 @@ on: jobs: linux: - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: runner: linux.2xlarge docker-image: ${{ inputs.docker-image }} diff --git a/.github/workflows/android-perf.yml b/.github/workflows/android-perf.yml index f2a289e2305..d55882c75a2 100644 --- a/.github/workflows/android-perf.yml +++ b/.github/workflows/android-perf.yml @@ -147,7 +147,7 @@ jobs: export-models: name: export-models - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main needs: set-parameters secrets: inherit strategy: @@ -324,7 +324,7 @@ jobs: build-benchmark-app: name: build-benchmark-app - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main needs: set-parameters with: runner: linux.2xlarge diff --git a/.github/workflows/android-release-artifacts.yml b/.github/workflows/android-release-artifacts.yml index a10de79363c..83c09b34b31 100644 --- a/.github/workflows/android-release-artifacts.yml +++ b/.github/workflows/android-release-artifacts.yml @@ -31,7 +31,7 @@ jobs: build-aar: name: build-aar needs: check-if-aar-exists - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-clang12-android diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml index 7a3b862b217..addbcb057fb 100644 --- a/.github/workflows/doc-build.yml +++ b/.github/workflows/doc-build.yml @@ -15,7 +15,7 @@ on: jobs: build: - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: matrix: include: @@ -82,7 +82,7 @@ jobs: if: github.repository == 'pytorch/executorch' && github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) permissions: contents: write - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: repository: pytorch/executorch download-artifact: docs diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 93c89355d76..db3dede7dab 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,7 +16,7 @@ concurrency: jobs: lintrunner: - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-linter @@ -62,7 +62,7 @@ jobs: exit $RC android-java-format: - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-linter diff --git a/.github/workflows/periodic.yml b/.github/workflows/periodic.yml index df13140ca92..28bc4d7c926 100644 --- a/.github/workflows/periodic.yml +++ b/.github/workflows/periodic.yml @@ -39,7 +39,7 @@ jobs: test-models-linux: name: test-models-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main needs: gather-models strategy: matrix: ${{ fromJSON(needs.gather-models.outputs.models) }} diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml index dbe0e872acd..445c250189a 100644 --- a/.github/workflows/pull.yml +++ b/.github/workflows/pull.yml @@ -33,7 +33,7 @@ jobs: test-setup-linux-gcc: name: test-setup-linux-gcc - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -55,7 +55,7 @@ jobs: test-models-linux: name: test-models-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main needs: gather-models strategy: matrix: ${{ fromJSON(needs.gather-models.outputs.models) }} @@ -82,7 +82,7 @@ jobs: test-llama-runner-linux: name: test-llama-runner-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: matrix: dtype: [fp32] @@ -121,7 +121,7 @@ jobs: test-llama-runner-linux-android: name: test-llama-runner-linux-android - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -141,7 +141,7 @@ jobs: test-custom-ops-linux: name: test-custom-ops-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -162,7 +162,7 @@ jobs: test-selective-build-linux: name: test-selective-build-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -183,7 +183,7 @@ jobs: test-llava-runner-linux: name: test-llava-runner-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -214,7 +214,7 @@ jobs: test-quantized-aot-lib-linux: name: test-quantized-aot-lib-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -234,7 +234,7 @@ jobs: test-pybind-build-linux: name: test-pybind-build-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -260,7 +260,7 @@ jobs: test-binary-size-linux-gcc: name: test-binary-size-linux-gcc - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -292,7 +292,7 @@ jobs: test-binary-size-linux: name: test-binary-size-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -365,7 +365,7 @@ jobs: test-llama-runner-qnn-linux: name: test-llama-runner-qnn-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: matrix: dtype: [fp32] @@ -400,7 +400,7 @@ jobs: test-qnn-models-linux: name: test-qnn-models-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -419,7 +419,7 @@ jobs: test-phi-3-mini-runner-linux: name: test-phi-3-mini-runner-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -446,7 +446,7 @@ jobs: test-eval_llama-wikitext-linux: name: test-eval_llama-wikitext-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -473,7 +473,7 @@ jobs: test-eval_llama-mmlu-linux: name: test-eval_llama-mmlu-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -500,7 +500,7 @@ jobs: test-llama_runner_eager-linux: name: test-llama_runner_eager-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: @@ -527,7 +527,7 @@ jobs: test-mediatek-models-linux: name: test-mediatek-models-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: fail-fast: false with: diff --git a/.github/workflows/trunk.yml b/.github/workflows/trunk.yml index 0cbbe6f643e..cd2dc21d334 100644 --- a/.github/workflows/trunk.yml +++ b/.github/workflows/trunk.yml @@ -107,7 +107,7 @@ jobs: test-demo-backend-delegation: name: test-demo-backend-delegation - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: matrix: include: @@ -301,7 +301,7 @@ jobs: test-qnn-model: name: test-qnn-model - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: matrix: dtype: [fp32] @@ -361,7 +361,7 @@ jobs: # NB: Don't run this on fork PRs because they won't have access to the secret and would fail anyway if: ${{ !github.event.pull_request.head.repo.fork }} name: test-huggingface-transformers - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main secrets: inherit strategy: matrix: @@ -445,7 +445,7 @@ jobs: test-llama-runner-qnn-linux: name: test-llama-runner-qnn-linux - uses: pytorch/test-infra/.github/workflows/linux_job.yml@main + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main strategy: matrix: dtype: [fp32] From 6c4cba4c3d75ce4194d4618faadb402a061993f6 Mon Sep 17 00:00:00 2001 From: Jack Zhang Date: Wed, 22 Jan 2025 11:28:32 -0800 Subject: [PATCH 2/3] Add read/write permissions --- .github/workflows/_android.yml | 3 + .github/workflows/_unittest.yml | 3 + .github/workflows/android-perf.yml | 6 ++ .../workflows/android-release-artifacts.yml | 3 + .github/workflows/doc-build.yml | 6 ++ .github/workflows/lint.yml | 6 ++ .github/workflows/periodic.yml | 3 + .github/workflows/pull.yml | 57 +++++++++++++++++++ .github/workflows/trunk.yml | 18 ++++++ 9 files changed, 105 insertions(+) diff --git a/.github/workflows/_android.yml b/.github/workflows/_android.yml index 11f6975979d..36b679eda44 100644 --- a/.github/workflows/_android.yml +++ b/.github/workflows/_android.yml @@ -8,6 +8,9 @@ jobs: build-llm-demo: name: build-llm-demo uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-clang12-android diff --git a/.github/workflows/_unittest.yml b/.github/workflows/_unittest.yml index 9ae36516c3d..414f86494b0 100644 --- a/.github/workflows/_unittest.yml +++ b/.github/workflows/_unittest.yml @@ -15,6 +15,9 @@ on: jobs: linux: uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read with: runner: linux.2xlarge docker-image: ${{ inputs.docker-image }} diff --git a/.github/workflows/android-perf.yml b/.github/workflows/android-perf.yml index d55882c75a2..cece39076d9 100644 --- a/.github/workflows/android-perf.yml +++ b/.github/workflows/android-perf.yml @@ -148,6 +148,9 @@ jobs: export-models: name: export-models uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read needs: set-parameters secrets: inherit strategy: @@ -325,6 +328,9 @@ jobs: build-benchmark-app: name: build-benchmark-app uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read needs: set-parameters with: runner: linux.2xlarge diff --git a/.github/workflows/android-release-artifacts.yml b/.github/workflows/android-release-artifacts.yml index 83c09b34b31..d204e121ffa 100644 --- a/.github/workflows/android-release-artifacts.yml +++ b/.github/workflows/android-release-artifacts.yml @@ -32,6 +32,9 @@ jobs: name: build-aar needs: check-if-aar-exists uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-clang12-android diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml index addbcb057fb..8069a3fabf7 100644 --- a/.github/workflows/doc-build.yml +++ b/.github/workflows/doc-build.yml @@ -16,6 +16,9 @@ on: jobs: build: uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: matrix: include: @@ -83,6 +86,9 @@ jobs: permissions: contents: write uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read with: repository: pytorch/executorch download-artifact: docs diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index db3dede7dab..aab68b30597 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -17,6 +17,9 @@ concurrency: jobs: lintrunner: uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-linter @@ -63,6 +66,9 @@ jobs: android-java-format: uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read with: runner: linux.2xlarge docker-image: executorch-ubuntu-22.04-linter diff --git a/.github/workflows/periodic.yml b/.github/workflows/periodic.yml index 28bc4d7c926..6b4644bb522 100644 --- a/.github/workflows/periodic.yml +++ b/.github/workflows/periodic.yml @@ -40,6 +40,9 @@ jobs: test-models-linux: name: test-models-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read needs: gather-models strategy: matrix: ${{ fromJSON(needs.gather-models.outputs.models) }} diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml index 445c250189a..bc6c823e7a4 100644 --- a/.github/workflows/pull.yml +++ b/.github/workflows/pull.yml @@ -34,6 +34,9 @@ jobs: test-setup-linux-gcc: name: test-setup-linux-gcc uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -56,6 +59,9 @@ jobs: test-models-linux: name: test-models-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read needs: gather-models strategy: matrix: ${{ fromJSON(needs.gather-models.outputs.models) }} @@ -83,6 +89,9 @@ jobs: test-llama-runner-linux: name: test-llama-runner-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: matrix: dtype: [fp32] @@ -122,6 +131,9 @@ jobs: test-llama-runner-linux-android: name: test-llama-runner-linux-android uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -142,6 +154,9 @@ jobs: test-custom-ops-linux: name: test-custom-ops-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -163,6 +178,9 @@ jobs: test-selective-build-linux: name: test-selective-build-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -184,6 +202,9 @@ jobs: test-llava-runner-linux: name: test-llava-runner-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -215,6 +236,9 @@ jobs: test-quantized-aot-lib-linux: name: test-quantized-aot-lib-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -235,6 +259,9 @@ jobs: test-pybind-build-linux: name: test-pybind-build-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -261,6 +288,9 @@ jobs: test-binary-size-linux-gcc: name: test-binary-size-linux-gcc uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -293,6 +323,9 @@ jobs: test-binary-size-linux: name: test-binary-size-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -333,6 +366,9 @@ jobs: unittest-arm: uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read permissions: id-token: write contents: read @@ -366,6 +402,9 @@ jobs: test-llama-runner-qnn-linux: name: test-llama-runner-qnn-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: matrix: dtype: [fp32] @@ -401,6 +440,9 @@ jobs: test-qnn-models-linux: name: test-qnn-models-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -420,6 +462,9 @@ jobs: test-phi-3-mini-runner-linux: name: test-phi-3-mini-runner-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -447,6 +492,9 @@ jobs: test-eval_llama-wikitext-linux: name: test-eval_llama-wikitext-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -474,6 +522,9 @@ jobs: test-eval_llama-mmlu-linux: name: test-eval_llama-mmlu-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -501,6 +552,9 @@ jobs: test-llama_runner_eager-linux: name: test-llama_runner_eager-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: @@ -528,6 +582,9 @@ jobs: test-mediatek-models-linux: name: test-mediatek-models-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: fail-fast: false with: diff --git a/.github/workflows/trunk.yml b/.github/workflows/trunk.yml index cd2dc21d334..d805fda2357 100644 --- a/.github/workflows/trunk.yml +++ b/.github/workflows/trunk.yml @@ -108,6 +108,9 @@ jobs: test-demo-backend-delegation: name: test-demo-backend-delegation uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: matrix: include: @@ -132,6 +135,9 @@ jobs: test-arm-backend-delegation: name: test-arm-backend-delegation uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read permissions: id-token: write contents: read @@ -162,6 +168,9 @@ jobs: test-arm-reference-delegation: name: test-arm-reference-delegation uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read permissions: id-token: write contents: read @@ -302,6 +311,9 @@ jobs: test-qnn-model: name: test-qnn-model uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: matrix: dtype: [fp32] @@ -362,6 +374,9 @@ jobs: if: ${{ !github.event.pull_request.head.repo.fork }} name: test-huggingface-transformers uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read secrets: inherit strategy: matrix: @@ -446,6 +461,9 @@ jobs: test-llama-runner-qnn-linux: name: test-llama-runner-qnn-linux uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main + permissions: + id-token: write + contents: read strategy: matrix: dtype: [fp32] From 4c7c7d6457576ce4f60d2bdc8d2a2e8557e9c6f2 Mon Sep 17 00:00:00 2001 From: Jack Zhang Date: Wed, 22 Jan 2025 13:58:01 -0800 Subject: [PATCH 3/3] Remove duplicate permissions --- .github/workflows/doc-build.yml | 4 +--- .github/workflows/pull.yml | 3 --- .github/workflows/trunk.yml | 6 ------ 3 files changed, 1 insertion(+), 12 deletions(-) diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml index 8069a3fabf7..b52961ed0b1 100644 --- a/.github/workflows/doc-build.yml +++ b/.github/workflows/doc-build.yml @@ -85,10 +85,8 @@ jobs: if: github.repository == 'pytorch/executorch' && github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) permissions: contents: write - uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main - permissions: - id-token: write contents: read + uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with: repository: pytorch/executorch download-artifact: docs diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml index bc6c823e7a4..6825eff0fe4 100644 --- a/.github/workflows/pull.yml +++ b/.github/workflows/pull.yml @@ -366,9 +366,6 @@ jobs: unittest-arm: uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main - permissions: - id-token: write - contents: read permissions: id-token: write contents: read diff --git a/.github/workflows/trunk.yml b/.github/workflows/trunk.yml index d805fda2357..325dc6ff933 100644 --- a/.github/workflows/trunk.yml +++ b/.github/workflows/trunk.yml @@ -135,9 +135,6 @@ jobs: test-arm-backend-delegation: name: test-arm-backend-delegation uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main - permissions: - id-token: write - contents: read permissions: id-token: write contents: read @@ -168,9 +165,6 @@ jobs: test-arm-reference-delegation: name: test-arm-reference-delegation uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main - permissions: - id-token: write - contents: read permissions: id-token: write contents: read