try add id-token

anthony-nhs · anthony-nhs · commit c658381f9c5e · 2026-02-18T23:20:28.000Z
diff --git a/.github/workflows/verify-runtime-image.yml b/.github/workflows/verify-runtime-image.yml
@@ -33,6 +33,7 @@ jobs:
             contents: read
             packages: read
             attestations: read
+            id-token: write
         outputs:
             pinned_image: ${{ steps.resolve.outputs.pinned_image }}
             digest: ${{ steps.resolve.outputs.digest }}
