From 08f70f1ac10a00d4c6d20ebc09379112f2dc7a7e Mon Sep 17 00:00:00 2001
From: Nicolas Merget <nicolas.merget@deutschebahn.com>
Date: Tue, 1 Oct 2024 10:48:51 +0200
Subject: [PATCH] fix: issue with permission for 03-publish-packages.yml

---
 .github/workflows/03-publish-packages.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/03-publish-packages.yml b/.github/workflows/03-publish-packages.yml
index 56ab4e0c6c2..acfbed8b104 100644
--- a/.github/workflows/03-publish-packages.yml
+++ b/.github/workflows/03-publish-packages.yml
@@ -20,6 +20,9 @@ jobs:
   publish:
     name: Publish latest package versions to GitHub Packages
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
     steps:
       - name: ⏬ Checkout repo
         uses: actions/checkout@v4
@@ -47,8 +50,6 @@ jobs:
             return await release({github, context, workspace, iconReleaseId})
 
       - name: 📰 Publish to NPM Registries
-        permissions:
-          id-token: write
         run: |
           chmod +rx ./.github/scripts/publish-npm.sh
           ./.github/scripts/publish-npm.sh