From 6f359475dce1c6ffd7667bb02031e8695b4367ae Mon Sep 17 00:00:00 2001
From: Rasmus Wejlgaard <pez@pez.sh>
Date: Fri, 15 May 2026 20:18:23 +0100
Subject: [PATCH] hotfix: broken pipeline

---
 .github/workflows/deploy-on-merge.yml | 2 ++
 .github/workflows/deploy.yml          | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/deploy-on-merge.yml b/.github/workflows/deploy-on-merge.yml
index b4993b4..15db35f 100644
--- a/.github/workflows/deploy-on-merge.yml
+++ b/.github/workflows/deploy-on-merge.yml
@@ -28,6 +28,8 @@ jobs:
       matrix:
         host: ${{ fromJson(needs.discover.outputs.hosts) }}
       fail-fast: false
+    permissions:
+      id-token: write
     uses: ./.github/workflows/_deploy-core.yml
     with:
       host: ${{ matrix.host }}
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index eb41ea1..e0a5242 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -44,6 +44,8 @@ jobs:
       matrix:
         host: ${{ fromJson(needs.prepare.outputs.hosts) }}
       fail-fast: false
+    permissions:
+      id-token: write
     uses: ./.github/workflows/_deploy-core.yml
     with:
       host: ${{ matrix.host }}