set id-token write

Author: tellmeY18

.github/workflows/ci.yml

@@ -6,6 +6,10 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  id-token: write
+  contents: read
+
 concurrency:
   group: ci-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/release.yml

@@ -6,7 +6,8 @@ on:
       - "v*"
 
 permissions:
-  contents: write
+  id-token: write
+  contents: read
 
 concurrency:
   group: release-${{ github.ref }}