Move token permissions to correct job

rabbitmq · Dec 12, 2022 · 05c2ec9 · 05c2ec9
1 parent 5b60d84
commit 05c2ec9
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/.github/workflows/build-test-publish.yml b/.github/workflows/build-test-publish.yml
@@ -61,10 +61,6 @@ jobs:
   build_operator:
     runs-on: ubuntu-latest
     needs: unit_integration_tests
-    # Add "id-token" with the intended permissions.
-    permissions:
-      contents: 'read'
-      id-token: 'write'
     steps:
     - name: Checkout
       uses: actions/checkout@v3
@@ -197,6 +193,10 @@ jobs:
     container: us.gcr.io/cf-rabbitmq-for-k8s-bunny/rabbitmq-for-kubernetes-ci
     if: ${{ github.event_name != 'pull_request' }}
     concurrency: ci-bunny-1
+    # Add "id-token" with the intended permissions.
+    permissions:
+      contents: 'read'
+      id-token: 'write'
     needs: build_operator
     strategy:
       matrix:
@@ -244,6 +244,10 @@ jobs:
     container: us.gcr.io/cf-rabbitmq-for-k8s-bunny/rabbitmq-for-kubernetes-ci
     if: ${{ github.event_name != 'pull_request' }}
     concurrency: ci-bunny-2
+    # Add "id-token" with the intended permissions.
+    permissions:
+      contents: 'read'
+      id-token: 'write'
     needs: build_operator
     steps:
     - name: Install Go