jobs:
  build:
    name: Build my code
+   permissions:
+     id-token: write
+     contents: read
    runs-on: ubuntu-latest
    steps:
    ...
+   - name: Fix my build
+     uses: fly-ci/wingman-action@v1
+     if: failure()