add az-sync step to every job

Author: sean-breen

.github/workflows/ci.yml

@@ -113,6 +113,7 @@ jobs:
     name: Unit Tests
     runs-on: ubuntu-22.04
     permissions:
+      id-token: write
       contents: write
     steps:
         - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
@@ -151,6 +152,8 @@ jobs:
   race-condition-test:
     name: Unit tests with race condition detection
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     steps:
         - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         - name: Get Secrets from Azure Key Vault
@@ -183,6 +186,8 @@ jobs:
   build-unsigned-snapshot:
     name: Build Unsigned Snapshot
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     steps:
         - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
           with:
@@ -231,6 +236,8 @@ jobs:
     name: Integration Tests
     needs: build-unsigned-snapshot
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     strategy:
       matrix:
         container:
@@ -295,6 +302,8 @@ jobs:
     name: Upgrade Tests
     needs: build-unsigned-snapshot
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     strategy:
       matrix:
         container:
@@ -360,6 +369,8 @@ jobs:
     needs: build-unsigned-snapshot
     if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     strategy:
       matrix:
         container:
@@ -433,6 +444,8 @@ jobs:
     needs: build-unsigned-snapshot
     if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     strategy:
       matrix:
         container:
@@ -521,6 +534,8 @@ jobs:
     needs: build-unsigned-snapshot
     if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     strategy:
       matrix:
         container:
@@ -594,6 +609,8 @@ jobs:
     needs: build-unsigned-snapshot
     if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
     runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
     strategy:
       matrix:
         container:
@@ -682,6 +699,7 @@ jobs:
     runs-on: ubuntu-22.04
     needs: build-unsigned-snapshot
     permissions:
+      id-token: write
       contents: write
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
@@ -732,6 +750,7 @@ jobs:
     name: Load Tests
     if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
     permissions:
+      id-token: write
       contents: write
     runs-on: ubuntu-22.04
     needs: build-unsigned-snapshot