Add id-token permission for OIDC in publish.yml

erezrokah · web-flow · commit 28a7fa60bb28 · 2026-02-02T11:41:20.000Z
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -5,6 +5,7 @@ on:
       - "v*.*.*"
 
 permissions:
+  id-token: write  # Required for OIDC
   contents: read
 
 jobs:
