From 05c2ec9204bb6fa4ee9bb58178605d4f77a53faa Mon Sep 17 00:00:00 2001
From: Connor Rogers <23215294+coro@users.noreply.github.com>
Date: Mon, 12 Dec 2022 11:58:43 +0000
Subject: [PATCH] Move token permissions to correct job

---
 .github/workflows/build-test-publish.yml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build-test-publish.yml b/.github/workflows/build-test-publish.yml
index 004ea531e..1fafce9d6 100644
--- a/.github/workflows/build-test-publish.yml
+++ b/.github/workflows/build-test-publish.yml
@@ -61,10 +61,6 @@ jobs:
   build_operator:
     runs-on: ubuntu-latest
     needs: unit_integration_tests
-    # Add "id-token" with the intended permissions.
-    permissions:
-      contents: 'read'
-      id-token: 'write'
     steps:
     - name: Checkout
       uses: actions/checkout@v3
@@ -197,6 +193,10 @@ jobs:
     container: us.gcr.io/cf-rabbitmq-for-k8s-bunny/rabbitmq-for-kubernetes-ci
     if: ${{ github.event_name != 'pull_request' }}
     concurrency: ci-bunny-1
+    # Add "id-token" with the intended permissions.
+    permissions:
+      contents: 'read'
+      id-token: 'write'
     needs: build_operator
     strategy:
       matrix:
@@ -244,6 +244,10 @@ jobs:
     container: us.gcr.io/cf-rabbitmq-for-k8s-bunny/rabbitmq-for-kubernetes-ci
     if: ${{ github.event_name != 'pull_request' }}
     concurrency: ci-bunny-2
+    # Add "id-token" with the intended permissions.
+    permissions:
+      contents: 'read'
+      id-token: 'write'
     needs: build_operator
     steps:
     - name: Install Go