From 47b4380dbaed6cb278d1687ed259afc507649c7e Mon Sep 17 00:00:00 2001
From: Jostein Holje <jostein.holje@nav.no>
Date: Fri, 5 Jan 2024 10:14:45 +0100
Subject: [PATCH] =?UTF-8?q?Permissions=20p=C3=A5=20deploy=20jobber?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/deploy.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 57dfff60..88f22640 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -57,6 +57,9 @@ jobs:
   deploy-dev:
     if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/dev')
     name: Deploy til dev
+    permissions:
+      contents: "read"
+      id-token: "write"
     needs: build-cdn-docker
     runs-on: ubuntu-latest
     steps:
@@ -72,6 +75,9 @@ jobs:
   deploy-prod:
     if: github.ref == 'refs/heads/main'
     name: Deploy til prod
+    permissions:
+      contents: "read"
+      id-token: "write"
     needs: [build-cdn-docker, deploy-dev]
     runs-on: ubuntu-latest
     steps: