fix: permissions for attestations image release step (#35)

Signed-off-by: jmeridth <[email protected]>
github · Jan 25, 2025 · 90604e8 · 90604e8
1 parent 1a24929
commit 90604e8
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release-image.yaml b/.github/workflows/release-image.yaml
@@ -31,6 +31,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
+      attestations: write
     env:
       IMAGE_REGISTRY: ${{ secrets.image-registry }}
       IMAGE_REGISTRY_USERNAME: ${{ secrets.image-registry-username }}