ER-709: Azure - Stop overriding GitHub Action Permissions (#760)

* ER-709: Azure Staging - GitHub Actions Workflow * ER-709: Omit permissions override --------- Co-authored-by: Sunny Sidhu <[email protected]>
DFE-Digital · Aug 9, 2023 · 58b297f · 58b297f
1 parent 98e60db
commit 58b297f
Show file tree

Hide file tree

Showing 5 changed files with 1 addition and 26 deletions.
diff --git a/.github/workflows/azure-deploy-dev.yml b/.github/workflows/azure-deploy-dev.yml
@@ -19,11 +19,6 @@ on:
       - terraform-azure/**
       - uml/*
 
-# Permissions for OIDC authentication
-permissions:
-  id-token: write
-  contents: read
-
 env:
   ARM_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
   ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

diff --git a/.github/workflows/azure-deploy-review-teardown.yml b/.github/workflows/azure-deploy-review-teardown.yml
@@ -5,11 +5,6 @@ on:
     types:
       - closed
 
-# Permissions for OIDC authentication
-permissions:
-  id-token: write
-  contents: read
-
 env:
   ARM_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
   ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

diff --git a/.github/workflows/azure-deploy-review.yml b/.github/workflows/azure-deploy-review.yml
@@ -20,11 +20,6 @@ on:
       - terraform-azure
       - uml/*
 
-# Permissions for OIDC authentication
-permissions:
-  id-token: write
-  contents: read
-
 env:
   ARM_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
   ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

diff --git a/.github/workflows/azure-deploy-stage.yml b/.github/workflows/azure-deploy-stage.yml
@@ -15,12 +15,7 @@ on:
   push:
     tags:
       - rc*
-
-# Permissions for OIDC authentication
-permissions:
-  id-token: write
-  contents: read
-
+      - 
 env:
   ARM_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
   ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

diff --git a/.github/workflows/tf-azure-deploy.yml b/.github/workflows/tf-azure-deploy.yml
@@ -23,11 +23,6 @@ defaults:
   run:
     working-directory: ./terraform-azure
 
-# Permissions for OIDC authentication
-permissions:
-  id-token: write
-  contents: read
-
 env:
   ARM_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
   ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}