From d499501ab0d0ca218fdee4f457be3be76ec1eac0 Mon Sep 17 00:00:00 2001
From: mvdbeek <m.vandenbeek@gmail.com>
Date: Thu, 19 Jun 2025 10:12:10 +0200
Subject: [PATCH] Add id-token: write for npm publishing

---
 .github/workflows/publish_artifacts.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish_artifacts.yaml b/.github/workflows/publish_artifacts.yaml
index e4bc8f6118f..ec9fb7c282f 100644
--- a/.github/workflows/publish_artifacts.yaml
+++ b/.github/workflows/publish_artifacts.yaml
@@ -29,6 +29,8 @@ jobs:
     if: github.repository_owner == 'galaxyproject'
     name: Build and Publish to NPM
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4