Merge pull request #655 from NHSDigital/feature/eja-eli-759-removing-reliance-on-PAT-for-regression-tests

eli-759 - adding permissions to the regression test calls

Author: eddalmond1

.github/workflows/base-deploy.yml

@@ -267,6 +267,11 @@ jobs:
     name: "Regression Tests"
     if: ${{ needs.metadata.outputs.environment == 'preprod' }}
     needs: deploy
+    permissions:
+      id-token: write
+      contents: read
+      issues: write
+      pull-requests: write
     uses: ./.github/workflows/regression-tests.yml
     with:
       ENVIRONMENT: "preprod"

.github/workflows/cicd-2-publish.yaml

@@ -154,6 +154,11 @@ jobs:
   regression-tests:
     name: "Regression Tests"
     needs: publish
+    permissions:
+      id-token: write
+      contents: read
+      issues: write
+      pull-requests: write
     uses: ./.github/workflows/regression-tests.yml
     with:
       ENVIRONMENT: "dev"

.github/workflows/cicd-3-test-deploy.yaml

@@ -252,6 +252,11 @@ jobs:
   regression-tests:
     name: "Regression Tests"
     needs: deploy
+    permissions:
+      id-token: write
+      contents: read
+      issues: write
+      pull-requests: write
     uses: ./.github/workflows/regression-tests.yml
     with:
       ENVIRONMENT: "test"