From e4d26bf9f637464afa7f920746f68e7734284f11 Mon Sep 17 00:00:00 2001
From: sjonpaulbrown <sjonpaulbrown@gmail.com>
Date: Mon, 24 Jun 2024 15:22:37 -0600
Subject: [PATCH] Update token permissions

---
 .../workflows/actions/test-monitor-process-results/action.yml  | 1 +
 .github/workflows/flaky-test-monitor.yml                       | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/actions/test-monitor-process-results/action.yml b/.github/workflows/actions/test-monitor-process-results/action.yml
index 387a362bb3e..6a0561b9a0e 100644
--- a/.github/workflows/actions/test-monitor-process-results/action.yml
+++ b/.github/workflows/actions/test-monitor-process-results/action.yml
@@ -34,6 +34,7 @@ runs:
         service_account: ${{ inputs.service_account }}
         token_format: 'access_token'
         workload_identity_provider: ${{ inputs.workload_identity_provider }}
+
     - name: Upload results to BigQuery (skipped tests)
       uses: nick-fields/retry@v2
       with:
diff --git a/.github/workflows/flaky-test-monitor.yml b/.github/workflows/flaky-test-monitor.yml
index 39c9be9c2e6..569582a70b1 100644
--- a/.github/workflows/flaky-test-monitor.yml
+++ b/.github/workflows/flaky-test-monitor.yml
@@ -10,6 +10,9 @@ on:
       - 'jp/update-flaky-test-monitor'
     paths:
       - '.github/workflows/flaky-test-monitor.yml'
+permissions:
+  id-token: write
+  contents: read
 
 env:
   BIGQUERY_DATASET: dev_src_flow_test_metrics