set permissions

Signed-off-by: Robert Waffen <rw@betadots.de>
betadots · Jul 19, 2024 · b51dcce · b51dcce
1 parent fcd0cbf
commit b51dcce
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -11,6 +11,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
+      attestations: write
     steps:
       - name: cut v from tag
         env:
@@ -22,6 +24,7 @@ jobs:
         uses: rwaffen/gha-build-and-publish-a-container@attest
         with:
           registry_password: ${{ secrets.GITHUB_TOKEN }}
+          attest: 'true'
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.split.outputs.tag }}
             ghcr.io/${{ github.repository }}:latest