From: Konstantin Pavlov <k.pavlov@f5.com>
Date: Mon, 28 Sep 2026 21:13:07 +0000 (-0700)
Subject: GH: request an id token and pass secrets to a callee in buildbot.yml
X-Git-Tag: release-1.31.8~5
X-Git-Url: https://git.kaiwu.me/?a=commitdiff_plain;h=97e4e7a224f73fa79ff1dda98ccdd96aa0c2930a;p=nginx.git

GH: request an id token and pass secrets to a callee in buildbot.yml

Both are required to be able to do authentication in a callee workflow.
---

diff --git a/.github/workflows/buildbot.yml b/.github/workflows/buildbot.yml
index 490491f36..5b8993a0e 100644
--- a/.github/workflows/buildbot.yml
+++ b/.github/workflows/buildbot.yml
@@ -8,7 +8,9 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   buildbot:
     uses: nginx/ci-self-hosted/.github/workflows/nginx-buildbot.yml@main
+    secrets: inherit