add github action permission for id-token fix2

Azure-Samples · Oct 9, 2024 · 953d5b5 · 953d5b5
1 parent bf82dff
commit 953d5b5
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/.github/workflows/aca-deploy.yaml b/.github/workflows/aca-deploy.yaml
@@ -14,7 +14,12 @@ on:
         container-app-env-name:
           required: true
           type: string
-
+
+# Set up permissions for deploying with secretless Azure federated credentials
+# https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure?tabs=azure-portal%2Clinux#set-up-azure-login-with-openid-connect-authentication
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
     deploy:

diff --git a/.github/workflows/acr-build-push.yaml b/.github/workflows/acr-build-push.yaml
@@ -11,7 +11,12 @@ on:
         app-folder-path:
           required: true
           type: string
-
+
+# Set up permissions for deploying with secretless Azure federated credentials
+# https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure?tabs=azure-portal%2Clinux#set-up-azure-login-with-openid-connect-authentication
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
     build: