From e96c80c78ab27642a604e91f18e4b7e970933972 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Mon, 18 May 2026 18:35:00 -0400
Subject: [PATCH] Add OIDC permissions to mobile deploy workflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Startup failure — caller workflow needs id-token: write for the
reusable workflow's OIDC credential step to function.
---
 .github/workflows/deploy-mobile.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/deploy-mobile.yaml b/.github/workflows/deploy-mobile.yaml
index 8ad0f5a..1f4db7c 100644
--- a/.github/workflows/deploy-mobile.yaml
+++ b/.github/workflows/deploy-mobile.yaml
@@ -12,6 +12,10 @@ concurrency:
   group: deploy-mobile
   cancel-in-progress: false
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   deploy-ios:
     name: Build & Upload to TestFlight