feat: update Azure Container Apps workflow to include permissions for…

… id-token and contents
Azure-Samples · Feb 12, 2025 · 0f785f2 · 0f785f2
1 parent 111346d
commit 0f785f2
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/azure-container-apps.yml b/.github/workflows/azure-container-apps.yml
@@ -5,6 +5,10 @@ on:
     branches: ['main']
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
+
 env:
   CONTAINER_APP_NAME: microblog-ai
   CONTAINER_APP_RESOURCE_GROUP: aswa-remix
@@ -13,6 +17,10 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     steps:
       - uses: actions/[email protected]
 
@@ -45,6 +53,9 @@ jobs:
   deploy:
     needs: build
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: Azure Login
         uses: azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2