ci(.github): add proper OIDC permissions to use trusted publisher

senges · senges · commit 51e3f01223c8 · 2024-12-04T18:37:30.000+01:00
diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
@@ -6,6 +6,10 @@ on:
   create:
     tags: ["v*"]
 
+permissions:
+  contents: read
+  id-token: write 
+
 jobs:
   uv-check:
     name: python
