From 844a2e9268d44ebc5a4b342b06c4d6aacb16e19c Mon Sep 17 00:00:00 2001
From: jake-perkins <128608287+jake-perkins@users.noreply.github.com>
Date: Thu, 31 Oct 2024 17:34:59 -0500
Subject: [PATCH] chore: update cicd perms (#12142)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## **Description**

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

## **Related issues**

Fixes:

## **Manual testing steps**

1. Go to this page...
2.
3.

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I’ve followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask Mobile
Coding
Standards](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.
---
 .github/workflows/create-release-pr.yml           | 2 ++
 .github/workflows/update-latest-build-version.yml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/create-release-pr.yml b/.github/workflows/create-release-pr.yml
index 25de8e3e976..951b5944adf 100644
--- a/.github/workflows/create-release-pr.yml
+++ b/.github/workflows/create-release-pr.yml
@@ -15,6 +15,8 @@ on:
 jobs:
   generate-build-version:
     uses: MetaMask/metamask-mobile-build-version/.github/workflows/metamask-mobile-build-version.yml@v0.2.0
+    permissions:
+      id-token: write
 
   create-release-pr:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/update-latest-build-version.yml b/.github/workflows/update-latest-build-version.yml
index 5795fcfc0f4..a61da90290b 100644
--- a/.github/workflows/update-latest-build-version.yml
+++ b/.github/workflows/update-latest-build-version.yml
@@ -17,6 +17,8 @@ on:
 jobs:
     generate-build-version:
       uses: MetaMask/metamask-mobile-build-version/.github/workflows/metamask-mobile-build-version.yml@v0.2.0
+      permissions:
+        id-token: write
 
     bump-version:
         runs-on: ubuntu-latest