From 91df561c5028bea4bf5faa285d3ca74c188fc918 Mon Sep 17 00:00:00 2001
From: Christopher Homberger <christopher.homberger@web.de>
Date: Fri, 12 Sep 2025 17:51:45 +0200
Subject: [PATCH] Fix attestation permissions for release job

* add run-name
---
 .github/workflows/build.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bf33014..6854b15 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,13 +13,15 @@ on:
       skip-packaging:
         description: 'Skip packaging'
         type: boolean
-  
+
+run-name: ${{ github.event_name == 'workflow_dispatch' && (inputs.version && format('Publish version:{0} sha:{1}', inputs.version, github.sha) || format('CI sha:{0}', github.sha)) || '' }}
+
 env:
   RUNNER_DEV_VERSION: "0.11.x"
   RUNNER_SERVER_VERSION: "3.11.16"
 jobs:
   build:
-    permissions:
+    permissions: &permissions
       id-token: write
       attestations: write
       contents: read
@@ -150,6 +152,7 @@ jobs:
   create-vendor-archive:
     name: Create Archive with all dependencies
     runs-on: ubuntu-latest
+    permissions: *permissions
     strategy:
       matrix:
         include: