GHA: Set id-token: write permission

dnault · dnault · commit 34304fa7467c · 2025-08-14T20:02:43.000Z
Motivation ---------- Required for setting aws credentials for publishing API reference docs to S3. Change-Id: I5720b918972c2073cb8a3e825faa5086ef7c226b Reviewed-on: https://review.couchbase.org/c/couchbase-jvm-clients/+/232287 Tested-by: Build Bot <build@couchbase.com> Reviewed-by: Michael Reiche <michael.reiche@couchbase.com>
diff --git a/.github/workflows/deploy-release-one-off-from-master.yml b/.github/workflows/deploy-release-one-off-from-master.yml
@@ -14,6 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/deploy-release.yml b/.github/workflows/deploy-release.yml
@@ -13,6 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
