From 853fd9cecbdd64b0af201bbf14a59ae7d32f207e Mon Sep 17 00:00:00 2001
From: Gad Benram <gidutz@gmail.com>
Date: Mon, 26 Oct 2026 22:06:33 +0000
Subject: [PATCH] Pin the grader that reports scores directly and grant
 id-token

---
 .github/workflows/grade.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/grade.yml b/.github/workflows/grade.yml
index d88f525..41356ea 100644
--- a/.github/workflows/grade.yml
+++ b/.github/workflows/grade.yml
@@ -6,8 +6,9 @@ on:
 permissions:
   contents: read
   pull-requests: read
+  id-token: write
 jobs:
   grade:
-    uses: TensorOpsAI/tensorlearn-intent-grader/.github/workflows/grade.yml@6e73f4b36097d43672ff6f7afc240106445c6fd5
+    uses: TensorOpsAI/tensorlearn-intent-grader/.github/workflows/grade.yml@ae587788e5d4799ecbb2e47ccc346b8316657c71
     with:
-      grader-sha: 6e73f4b36097d43672ff6f7afc240106445c6fd5
+      grader-sha: ae587788e5d4799ecbb2e47ccc346b8316657c71