From 3a14d87b0a42b9bb2c58576cf7cac0edfa275261 Mon Sep 17 00:00:00 2001
From: Ronald Tse <ronald.tse@ribose.com>
Date: Sun, 26 Jul 2026 23:36:09 +0800
Subject: [PATCH] Add id-token: write permission for metanorma/ci reusable
 workflows

---
 .github/workflows/rake.yml    | 1 +
 .github/workflows/release.yml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/rake.yml b/.github/workflows/rake.yml
index 2f6c22e..7a468f5 100644
--- a/.github/workflows/rake.yml
+++ b/.github/workflows/rake.yml
@@ -2,6 +2,7 @@ name: rake
 
 permissions:
   contents: read
+  id-token: write
 
 on:
   push:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7bfcb47..b394817 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,7 @@ name: release
 permissions:
   contents: write
   packages: write
+  id-token: write
 
 on:
   workflow_dispatch: