permissions:

permissions for the GITHUB_TOKEN.

https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

jobs:
  build-and-deploy-docker-image:
    runs-on: self-hosted
    permissions:
      id-token: write
      contents: read

permissions:
  contents: read
  pull-requests: write

permissions:
  issues: write

Related

• jobs:

See also

• GitHub Actions, act, .github/workflows/, ~/actions-runner/, svc.sh, deploy:, run:, runs-on:, uses:, steps:, jobs:, on:, env:, uses:, script:, continue-on-error:, template:, aws-actions, inputs:, GITHUB_ENV, needs:, github., GitHub runner, my-docker-publish.yml, GitHub Actions variables, GitHub Actions contexts, GitHub Actions Importer, If:, SLSA, Actions Runner Controller (ARC), $GITHUB OUTPUT, notify:, Marketplace, GITHUB_TOKEN