Skip to content

Commit 21768a6

Browse files
committed
build(workflows): add id-token permissions
Add `id-token: write` permission for OIDC support used for automated release process.
1 parent 8055c49 commit 21768a6

1 file changed

Lines changed: 16 additions & 6 deletions

File tree

.github/workflows/release.yml

Lines changed: 16 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,21 @@ on:
55
branches: [master]
66
types: [closed]
77

8+
permissions:
9+
actions: write
10+
attestations: write
11+
checks: write
12+
contents: write
13+
deployments: write
14+
discussions: write
15+
issues: write
16+
id-token: write
17+
packages: write
18+
pull-requests: write
19+
repository-projects: write
20+
security-events: write
21+
statuses: write
22+
823
jobs:
924
check-release:
1025
name: Check release required
@@ -46,16 +61,11 @@ jobs:
4661
token: ${{ secrets.GH_TOKEN }}
4762
path: .github/.release/actions
4863
- name: Install Dart SDK
49-
uses: dart-lang/setup-dart@9a04e6d73cca37bd455e0608d7e5092f881fd603
64+
uses: dart-lang/setup-dart@v1
5065
- name: Publish to Pub
5166
uses: ./.github/.release/actions/actions/services/pub
5267
with:
5368
token: ${{ secrets.GH_TOKEN }}
54-
pub-token-endpoint: ${{ secrets.DART_TOKEN_ENDPOINT }}
55-
pub-access-token: ${{ secrets.DART_ACCESS_TOKEN }}
56-
pub-refresh-token: ${{ secrets.DART_REFRESH_TOKEN }}
57-
pub-id-token: ${{ secrets.DART_ID_TOKEN }}
58-
pub-token-expiration: ${{ secrets.DART_TOKEN_EXPIRATION }}
5969
- name: Create Release
6070
uses: ./.github/.release/actions/actions/services/github-release
6171
with:

0 commit comments

Comments
 (0)