update

.github/workflows/build.yml

@@ -1,4 +1,7 @@
 name: Build
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 on:
   pull_request:
     types: [ opened, edited ]

.github/workflows/code-nightly.yml

@@ -1,5 +1,7 @@
 name: Code Nightly
-
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 on:
   workflow_dispatch:
   schedule:

.github/workflows/ide-integration-tests.yml

@@ -1,4 +1,7 @@
 name: "IDE integration tests"
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 on:
   workflow_dispatch:
     inputs:

.github/workflows/jetbrains-auto-update-template.yml

@@ -1,3 +1,6 @@
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 on:
   workflow_call:
     inputs:

.github/workflows/lacework-inline-scanner.yml

@@ -1,3 +1,6 @@
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 name: Lacework Inline Scanner
 on:
   workflow_run:

.github/workflows/preview-env-check-regressions.yml

@@ -1,4 +1,7 @@
 name: "Preview environment regression check"
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 on:
   workflow_run:
     workflows: ["Build"]

.github/workflows/workspace-integration-tests.yml

@@ -1,4 +1,7 @@
 name: "Workspace integration tests"
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
 on:
   workflow_dispatch:
     inputs: