+

Author: RomanNabukhotnyi

.github/workflows/release-feature-branch.yaml

@@ -342,7 +342,7 @@ jobs:
     runs-on: ubuntu-22.04
     permissions:
       contents: read
-      id-token: write
+      id-token: write # for OIDC
     # force empty so npm can use OIDC
     env:
       NODE_AUTH_TOKEN: ""   

.github/workflows/release-latest.yaml

@@ -305,8 +305,8 @@ jobs:
 
   release:
     permissions:
-      contents: write
-      id-token: write
+      contents: write # for creating GitHub releases
+      id-token: write # for OIDC
     needs:
       - test
       - attw