[internal] Update GitHub Actions workflow files (#794)

pulumi · Jan 30, 2025 · 10b3a5e · 10b3a5e
1 parent f4fcf55
commit 10b3a5e
Show file tree

Hide file tree

Showing 6 changed files with 1 addition and 10 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -96,7 +96,6 @@ jobs:
     name: publish
     permissions:
       contents: write
-      id-token: write
     needs:
       - prerequisites
       - build_provider

diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
@@ -57,7 +57,6 @@ jobs:
     name: publish
     permissions:
       contents: write
-      id-token: write
     needs:
       - prerequisites
       - build_provider

diff --git a/.github/workflows/prerequisites.yml b/.github/workflows/prerequisites.yml
@@ -73,7 +73,7 @@ jobs:
     - name: Unit-test provider code
       run: make test_provider
     - name: Upload coverage reports to Codecov
-      uses: codecov/codecov-action@5a605bd92782ce0810fa3b8acc235c921b497052 # v5.2.0
+      uses: codecov/codecov-action@0da7aa657d958d32c117fc47e1f977e7524753c7 # v5.3.0
       env:
         CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
     - if: inputs.is_pr

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -188,9 +188,6 @@ jobs:
   verify_release:
     name: verify_release
     needs: publish_sdk
-    permissions:
-      contents: write
-      id-token: write
     uses: ./.github/workflows/verify-release.yml
     secrets: inherit
     with:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -63,7 +63,6 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-      id-token: write
     needs:
       - prerequisites
       - build_provider

diff --git a/.github/workflows/verify-release.yml b/.github/workflows/verify-release.yml
@@ -72,9 +72,6 @@ jobs:
         # See the docs for a similar example to this: https://docs.github.com/en/actions/learn-github-actions/expressions#fromjson
         runner: ${{ fromJSON(format('["ubuntu-latest","windows-latest"{0}]', inputs.enableMacRunner && ',"macos-latest"' || '')) }}
     runs-on: ${{ matrix.runner }}
-    permissions:
-      contents: 'read'
-      id-token: 'write'
     steps:
       - name: Configure Git to checkout files with long names
         run: git config --global core.longpaths true