Specify permissions token strategy

ryanrdoherty · web-flow · commit 47157d6cc494 · 2025-10-29T11:57:09.000-04:00
diff --git a/.github/workflows/npm-publish-sites.yml b/.github/workflows/npm-publish-sites.yml
@@ -25,6 +25,9 @@ jobs:
     needs:
       - dirs
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write  # required to use OIDC
     strategy:
       matrix:
         dir: ${{fromJSON(needs.dirs.outputs.matrix)}}
