The permission id-token write needs to be set on rocm-test callers (#117422)

huydhn · atalman · commit 80a1b208f0c8 · 2024-02-09T09:04:00.000-08:00
All these workflows lack the necessary permission to run `_rocm-test` job after #117160, for example https://github.com/pytorch/pytorch/actions/runs/7508520071 Confirm that trunk is back https://github.com/pytorch/pytorch/actions/runs/7508830196. Other workflows would be the same, i.e. rocm https://github.com/pytorch/pytorch/actions/runs/7508830137/job/20444989127. Pull Request resolved: #117422 Approved by: https://github.com/atalman
diff --git a/.github/workflows/periodic.yml b/.github/workflows/periodic.yml
@@ -235,6 +235,9 @@ jobs:
         ]}
 
   linux-focal-rocm5_7-py3_8-test:
+    permissions:
+      id-token: write
+      contents: read
     name: linux-focal-rocm5.7-py3.8
     uses: ./.github/workflows/_rocm-test.yml
     needs: linux-focal-rocm5_7-py3_8-build
diff --git a/.github/workflows/rocm.yml b/.github/workflows/rocm.yml
@@ -31,6 +31,9 @@ jobs:
         ]}
 
   linux-focal-rocm5_7-py3_8-test:
+    permissions:
+      id-token: write
+      contents: read
     name: linux-focal-rocm5.7-py3.8
     uses: ./.github/workflows/_rocm-test.yml
     needs: linux-focal-rocm5_7-py3_8-build
diff --git a/.github/workflows/slow.yml b/.github/workflows/slow.yml
@@ -98,6 +98,9 @@ jobs:
         ]}
 
   linux-focal-rocm5_6-py3_8-test:
+    permissions:
+      id-token: write
+      contents: read
     name: linux-focal-rocm5.6-py3.8
     uses: ./.github/workflows/_rocm-test.yml
     needs: linux-focal-rocm5_6-py3_8-build
diff --git a/.github/workflows/trunk.yml b/.github/workflows/trunk.yml
@@ -188,6 +188,9 @@ jobs:
         ]}
 
   linux-focal-rocm5_7-py3_8-test:
+    permissions:
+      id-token: write
+      contents: read
     name: linux-focal-rocm5.7-py3.8
     uses: ./.github/workflows/_rocm-test.yml
     needs: linux-focal-rocm5_7-py3_8-build
