From 8f1b577b5e228de0ebad6a9b72ed5d658da3a599 Mon Sep 17 00:00:00 2001 From: Aarnav Tale Date: Sun, 22 Jun 2025 17:32:39 -0400 Subject: [PATCH] fix: allow id-token write in gh actions --- .github/workflows/next.yaml | 3 ++- .github/workflows/release.yaml | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/next.yaml b/.github/workflows/next.yaml index 7129d52..25db922 100644 --- a/.github/workflows/next.yaml +++ b/.github/workflows/next.yaml @@ -12,6 +12,7 @@ permissions: actions: write # Allow canceling in-progress runs contents: read # Read access to the repository packages: write # Write access to the container registry + id-token: write # For the attest action to push jobs: publish: @@ -56,7 +57,7 @@ jobs: platforms: linux/amd64, linux/arm64 cache-from: type=gha cache-to: type=gha,mode=max - - name: Attest + - name: Attestation Provenance uses: actions/attest-build-provenance@v2 id: attest with: diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index b7442cf..d36072a 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -12,6 +12,7 @@ permissions: actions: write # Allow canceling in-progress runs contents: read # Read access to the repository packages: write # Write access to the container registry + id-token: write # For the attest action to push jobs: docker: @@ -54,7 +55,7 @@ jobs: platforms: linux/amd64, linux/arm64 cache-from: type=gha cache-to: type=gha,mode=max - - name: Attest + - name: Attestation Provenance uses: actions/attest-build-provenance@v2 id: attest with: