From f47d0a1e0b13f6c0c97a9db71144a175ac60ed49 Mon Sep 17 00:00:00 2001
From: Eduard van Valkenburg <eavanvalkenburg@users.noreply.github.com>
Date: Mon, 28 Jul 2025 10:42:27 +0200
Subject: [PATCH] fixed permissions (#246)

---
 .github/workflows/python-merge-tests.yml | 16 ++--------------
 1 file changed, 2 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/python-merge-tests.yml b/.github/workflows/python-merge-tests.yml
index e63a8d9288..f1deed4c9b 100644
--- a/.github/workflows/python-merge-tests.yml
+++ b/.github/workflows/python-merge-tests.yml
@@ -1,4 +1,4 @@
-name: Python - Tests - Merge
+name: Python - Merge - Tests
 
 on:
   workflow_dispatch:
@@ -6,7 +6,7 @@ on:
     branches: ["main"]
 
 permissions:
-  contents: read
+  contents: write
   id-token: write
 
 env:
@@ -31,8 +31,6 @@ jobs:
       OPENAI_CHAT_MODEL_ID: ${{ vars.OPENAI__CHATMODELID }}
       OPENAI_API_KEY: ${{ secrets.OPENAI__APIKEY }}
       PACKAGE_NAME: "main"
-    permissions:
-      contents: write
     defaults:
       run:
         working-directory: python
@@ -85,8 +83,6 @@ jobs:
       AZURE_OPENAI_CHAT_DEPLOYMENT_NAME: ${{ vars.AZUREAI__DEPLOYMENTNAME }}
       AZURE_OPENAI_ENDPOINT: ${{ secrets.AZUREAI__ENDPOINT }}
       PACKAGE_NAME: "azure"
-    permissions:
-      contents: write
     defaults:
       run:
         working-directory: python
@@ -102,12 +98,6 @@ jobs:
       - name: Install the project
         run: |
           uv sync --all-packages --all-extras --dev -U --prerelease=if-necessary-or-explicit
-      - name: Check setup
-        run: |
-          az version
-          echo "ACTIONS_ID_TOKEN_REQUEST_URL = $ACTIONS_ID_TOKEN_REQUEST_URL"
-          echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN = $ACTIONS_ID_TOKEN_REQUEST_TOKEN"
-          echo "TENANT_ID=${{ secrets.AZURE_TENANT_ID }}"
       - name: Azure CLI Login
         if: github.event_name != 'pull_request'
         uses: azure/login@v2
@@ -152,8 +142,6 @@ jobs:
       FOUNDRY_PROJECT_ENDPOINT: ${{ vars.FOUNDRY_PROJECT_ENDPOINT }}
       FOUNDRY_MODEL_DEPLOYMENT_NAME: ${{ vars.FOUNDRY_MODEL_DEPLOYMENT_NAME }}
       PACKAGE_NAME: "foundry"
-    permissions:
-      contents: write
     defaults:
       run:
         working-directory: python