mirror of
https://github.com/apache/airflow.git
synced 2026-03-26 15:28:46 +00:00
The registry build job uses static AWS credentials (access key + secret), not OIDC, so `id-token: write` is not needed. Removing it fixes the `workflow_call` from `publish-docs-to-s3.yml` which only grants `contents: read` — callers cannot escalate permissions for nested jobs.