Add id-token write permission #60

	name: Workflow for install-docker

	on:
	push:
	branches:
	- master
	pull_request:
	branches:
	- master

	jobs:
	validate:
	permissions:
	contents: read
	runs-on: ubuntu-latest
	timeout-minutes: 10
	container:
	image: rancher/dapper:v0.6.0
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Validate
	run: dapper validate

	test:
	permissions:
	contents: read
	needs: validate
	runs-on: ubuntu-latest
	timeout-minutes: 90
	if: github.event_name == 'pull_request'
	container:
	image: rancher/dapper:v0.6.0
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Test
	run: dapper test

	upload-dev:
	permissions:
	contents: read
	id-token: write
	needs: validate
	runs-on: ubuntu-latest
	timeout-minutes: 10
	if: github.event_name == 'push' && github.ref == 'refs/heads/master'
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Add commit to version file
	run: \|
	echo "{\"version\": \"${{ github.sha }}\"}" > dist/VERSION
	- name: Retrieve Google auth from vault
	uses: rancher-eio/read-vault-secrets@main
	with:
	secrets: \|
	secret/data/github/repo/${{ github.repository }}/google-auth/rancher/credentials token \| GOOGLE_AUTH
	- name: Authenticate with Google Cloud
	uses: 'google-github-actions/auth@v2'
	with:
	credentials_json: '${{ env.GOOGLE_AUTH }}'
	- name: Upload to Google Cloud Storage
	uses: google-github-actions/upload-cloud-storage@v2
	with:
	path: dist/
	destination: releases.rancher.com/install-docker-dev
	parent: false
	predefinedAcl: publicRead
	headers: \|-
	cache-control: public,no-cache,proxy-revalidate

Provide feedback