From 34342d67752292d3f562bf1021035d6e5acb5f69 Mon Sep 17 00:00:00 2001
From: Andrew Newton <andy.newton@dvsa.gov.uk>
Date: Wed, 22 Jan 2025 17:03:01 +0000
Subject: [PATCH] fix: add permissions and secrets for prep rollback (#571)

---
 .github/workflows/cd.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 9c9080a6df..62d582080c 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -668,6 +668,11 @@ jobs:
       internal-image-tag: ${{ needs.terraform_env_prep.outputs.previous_internal_image_tag }}
       assets-version: ${{ needs.terraform_env_prep.outputs.previous_assets_version }}
       search-image-tag: ${{ needs.get-version.outputs.search }}
+    permissions:
+      contents: read
+      id-token: write
+      pull-requests: write
+    secrets: inherit
 
   liquibase-prod:
     name: Database Migrations (prod)