From 454db90f84243c4cda926c966bbe97d46e0f0ab9 Mon Sep 17 00:00:00 2001 From: Henry Park Date: Sun, 8 Mar 2026 15:04:20 -0700 Subject: [PATCH] fix(ci): add id-token:write to staging-ci parent workflow [skip-regression-check] Called workflows inherit permissions from the parent. claude-review.yml needs id-token:write for OIDC, so the parent staging-ci.yml must also declare it. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/staging-ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/staging-ci.yml b/.github/workflows/staging-ci.yml index 9b97c9b8..254e806e 100644 --- a/.github/workflows/staging-ci.yml +++ b/.github/workflows/staging-ci.yml @@ -18,6 +18,7 @@ permissions: contents: write issues: write # Claude review creates issues for critical findings pull-requests: write # Auto-promote creates + merges PR to main + id-token: write # Required by claude-code-action for OIDC auth concurrency: group: staging-ci