ci: fix permissions issues

Author: Mcdostone

.github/workflows/changelog.yml

@@ -15,8 +15,6 @@ jobs:
     name: Create changelog
     runs-on: ubuntu-latest
     permissions:
-      id-token: write
-      packages: write
       contents: write
       pull-requests: write
     steps:

.github/workflows/documentation.yml

@@ -17,7 +17,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
@@ -51,6 +50,7 @@ jobs:
     name: Deploy
     permissions:
       pages: write
+      id-token: write
     steps:
       - name: Deploy to GitHub Pages
         id: deployment

.github/workflows/publish.yml

@@ -14,6 +14,7 @@ on:
   push:
     tags:
       - '[0-9]+.[0-9]+.[0-9]+'
+    
   workflow_call:
 #  workflow_run:
 #    workflows: ['Tag']
@@ -65,8 +66,7 @@ jobs:
     secrets: 
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     permissions:
-      contents: read
-      issues: write
+      contents: write
       pull-requests: write
 
   build-and-publish:

.github/workflows/tag.yml

@@ -75,5 +75,4 @@ jobs:
       attestations: write
       id-token: write
       pull-requests: write
-    secrets: 
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    secrets: inherit