add permission

Author: anthony-nhs

.gitallowed

@@ -8,3 +8,4 @@ token = os\.environ\.get\(\"GH_TOKEN\"\)
 poetry\.lock
 \-Dsonar\.token=\"\$SONAR_TOKEN\"
 token: "\${{ steps\.generate-token\.outputs\.token }}"
+id-token: 'write'

.github/workflows/tag-release-devcontainer.yml

@@ -73,6 +73,8 @@ on:
                 description: "ARN of the role to assume when executing the Jira update lambda"
 jobs:
     tag_release:
+        permissions:
+          id-token: 'write'
         runs-on: ubuntu-22.04
         container:
             image: ${{ inputs.pinned_image }}