fix(ci): scope Hugging Face OIDC to publisher job

2026-08-14 08:52:21 +00:00 · 2026-06-26 14:55:54 -07:00
parent 703b57ad24
commit 9d2bed25d8
1 changed files with 3 additions and 1 deletions
@@ -48,7 +48,6 @@ on:

 permissions:
  contents: read
-  id-token: write

 concurrency:
  group: clawhub-security-dataset-snapshot
@@ -229,6 +228,9 @@ jobs:
    runs-on: ubuntu-24.04
    timeout-minutes: 120
    environment: Production
+    permissions:
+      contents: read
+      id-token: write
    env:
      HF_DATASET_REPO: OpenClaw/clawhub-security-signals
      HF_OIDC_RESOURCE: datasets/OpenClaw/clawhub-security-signals