s

Author: brendan-kellam

.github/workflows/scratch-workflow.yml

@@ -10,6 +10,13 @@ jobs:
     runs-on: ubuntu-latest
     environment: staging
     steps:
+
+      permissions:
+        contents: 'read'
+        # Requird for OIDC auth with GCP.
+        # @see: https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/about-security-hardening-with-openid-connect#adding-permissions-settings
+        id-token: 'write'
+
       # - name: 'Checkout'
       #   uses: 'actions/checkout@v3'
       #   with: