m

Author: Lucas McDonald

.github/workflows/daily_ci.yml

@@ -3,18 +3,20 @@ name: Daily CI
 
 permissions:
   contents: read
-  id-token: write
 
 on:
   schedule:
     - cron: "00 15 * * 1-5"
   pull_request:
     paths:
-      .github/workflows/daily_ci.yml
+      - .github/workflows/daily_ci.yml
 
 jobs:
   codebuild:
-    if: github.event_name != 'schedule' || github.repository_owner == 'aws'
+    if: github.event_name == 'pull_request' || github.repository_owner == 'aws'
+    permissions:
+      contents: read
+      id-token: write
     uses: ./.github/workflows/codebuild.yml
     secrets: inherit
   notify:

.github/workflows/push.yml

@@ -6,13 +6,15 @@ on:
 
 permissions:
   contents: read
-  id-token: write
 
 jobs:
   clang-format:
     uses: ./.github/workflows/clang-format.yml
     secrets: inherit
   codebuild:
+    permissions:
+      contents: read
+      id-token: write
     uses: ./.github/workflows/codebuild.yml
     secrets: inherit
   osx: