Add permissions for oidc

Author: Cadair

.github/workflows/ci.yml

@@ -22,6 +22,8 @@ on:
     #        │ │ │ │ ┌───────── day of the week (0 - 6 or SUN-SAT)
     - cron: "0 7 * * *" # Every day at 07:00 UTC
 
+permissions: {}
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -134,6 +136,8 @@ jobs:
     name: Upload to PyPI
     runs-on: ubuntu-latest
     needs: [build]
+    permissions:
+      id-token: write
     steps:
       - name: Download artifacts
         uses: actions/download-artifact@v5