fix: allow id-token write in gh actions

This commit is contained in:
Aarnav Tale 2025-06-22 17:32:39 -04:00
parent 9a81b76398
commit 8f1b577b5e
No known key found for this signature in database
2 changed files with 4 additions and 2 deletions

View File

@ -12,6 +12,7 @@ permissions:
actions: write # Allow canceling in-progress runs
contents: read # Read access to the repository
packages: write # Write access to the container registry
id-token: write # For the attest action to push
jobs:
publish:
@ -56,7 +57,7 @@ jobs:
platforms: linux/amd64, linux/arm64
cache-from: type=gha
cache-to: type=gha,mode=max
- name: Attest
- name: Attestation Provenance
uses: actions/attest-build-provenance@v2
id: attest
with:

View File

@ -12,6 +12,7 @@ permissions:
actions: write # Allow canceling in-progress runs
contents: read # Read access to the repository
packages: write # Write access to the container registry
id-token: write # For the attest action to push
jobs:
docker:
@ -54,7 +55,7 @@ jobs:
platforms: linux/amd64, linux/arm64
cache-from: type=gha
cache-to: type=gha,mode=max
- name: Attest
- name: Attestation Provenance
uses: actions/attest-build-provenance@v2
id: attest
with: