Start caching to FHC, especiall mac builds

.github/workflows/build.yaml

@@ -7,6 +7,9 @@ on:
 jobs:
   build-artifacts-ARM64-macOS:
     runs-on: macos-latest-xlarge
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
@@ -27,6 +30,9 @@ jobs:
 
   build-artifacts-X64-macOS:
     runs-on: macos-12
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
@@ -49,6 +55,9 @@ jobs:
 
   build-artifacts-X64-Linux:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
@@ -71,6 +80,9 @@ jobs:
 
   build-artifacts-ARM64-Linux:
     runs-on: namespace-profile-default-arm64
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 

.github/workflows/checks.yaml

@@ -8,6 +8,9 @@ on:
 jobs:
   checks:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
@@ -25,3 +28,7 @@ jobs:
 
       - name: Clippy
         run: nix develop --command cargo clippy
+
+  build:
+    uses: ./.github/workflows/build.yaml
+    secrets: inherit