We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 974d2d4 commit 7a0f6e7Copy full SHA for 7a0f6e7
1 file changed
.github/workflows/release-build.yml
@@ -43,6 +43,7 @@ jobs:
43
TEST_GITHUB_TOTP_SECRET: ${{ secrets.TEST_GITHUB_TOTP_SECRET }}
44
permissions:
45
actions: read # is needed by anchore/sbom-action to find workflow artifacts when attaching release assets
46
+ artifact-metadata: write # is needed by actions/attest-build-provenance to write artifact metadata
47
attestations: write # is needed by actions/attest-build-provenance to push attestations
48
contents: write # is needed by anchore/sbom-action for artifact uploads
49
id-token: write # is needed by actions/attest-build-provenance to obtain an OIDC token
0 commit comments