From 167a0feb31261411256e7fb797f9185cba1e6efb Mon Sep 17 00:00:00 2001
From: Lucas Nogueira <lucas@tauri.app>
Date: Sat, 17 Aug 2024 00:38:09 -0300
Subject: [PATCH] fix(ci): missing id-token write permission for provenance

---
 .github/workflows/covector-version-or-publish.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/covector-version-or-publish.yml b/.github/workflows/covector-version-or-publish.yml
index 66a87ebaf..18c105717 100644
--- a/.github/workflows/covector-version-or-publish.yml
+++ b/.github/workflows/covector-version-or-publish.yml
@@ -61,6 +61,7 @@ jobs:
       actions: write # required for workflow_dispatch
       contents: write # required to create new releases
       pull-requests: write # required to open version update pr
+      id-token: write # pnpm provenance
     outputs:
       change: ${{ steps.covector.outputs.change }}
       commandRan: ${{ steps.covector.outputs.commandRan }}