updates to correct yaml on generate and permissions on validate

.github/workflows/sdk_generation.yaml

@@ -4,7 +4,8 @@ permissions:
   contents: write
   pull-requests: write
   statuses: write
-"on":
+  id-token: write
+on:
   workflow_dispatch:
     inputs:
       force:
@@ -15,6 +16,8 @@ permissions:
     - cron: 0 0 * * *
 jobs:
   generate:
+    runs-on: ubuntu-latest
+    steps:
     - name: "Authenticate with AWS"
       uses: goshippo/shippo-action-workflows/.github/actions/[email protected]
       with:
@@ -34,6 +37,6 @@ jobs:
         force: ${{ github.event.inputs.force }}
         mode: pr
         speakeasy_version: latest
-      secrets:
+      env:
         github_access_token: ${{ secrets.GITHUB_TOKEN }}
         speakeasy_api_key: ${{ env.DEV_MAIN_SPEAKEASY_API_KEY_PHP_API_KEY }}

.github/workflows/sdk_validation.yaml

@@ -1,5 +1,7 @@
 name: Validate
-
+permissions:
+  contents: write
+  id-token: write
 on:
   workflow_call:
   pull_request: