From ccf461bc845174afc75c9664406e2162ee134597 Mon Sep 17 00:00:00 2001
From: Helio Machado <0x2b3bfa0+git@googlemail.com>
Date: Tue, 12 Sep 2023 16:42:37 +0200
Subject: [PATCH] Migrate from PyPI tokens to Trusted Publishers (#9933)

* Migrate Python repositories to Trusted Publishers

* Update build.yaml

* Update .github/workflows/build.yaml

Co-authored-by: Helio Machado <0x2b3bfa0+git@googlemail.com>

* Update build.yaml

---------

Co-authored-by: skshetry <18718008+skshetry@users.noreply.github.com>
---
 .github/workflows/build.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 4d6a4fc36..a510967e0 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -9,10 +9,12 @@ on:
 
 permissions:
   contents: read
-  id-token: write
 
 jobs:
   pip:
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4