Testing

Author: Val Brodsky

.github/workflows/publish.yml

@@ -24,10 +24,17 @@ permissions:
 
 jobs:
   build-lbox:
+    permissions:
+      actions: read
+      contents: write
+      id-token: write # Needed to access the workflow's OIDC identity.
+      packages: write
     uses: ./.github/workflows/lbox-publish.yml
     with:
       tag: ${{ inputs.tag }}
+    secrets: inherit
   build:
+    needs: ['build-lbox']
     runs-on: ubuntu-latest
     outputs:
       hashes: ${{ steps.hash.outputs.hashes }}