Merge pull request #21 from mallardduck/ci-bug-perms

Add write to packages/attestations for ghcr.io packages
rancher · Nov 8, 2024 · a1e9073 · a1e9073
2 parents 26ed47c + 36af422
commit a1e9073
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/head-build.yml b/.github/workflows/head-build.yml
@@ -39,6 +39,8 @@ jobs:
       # - Read vault secrets in rancher-eio/read-vault-secrets.
       # - Publish image to ghcr.io
       id-token: write
+      packages: write
+      attestations: write
 
     runs-on: ubuntu-latest
     needs:

diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
@@ -27,6 +27,8 @@ jobs:
       # - OIDC for cosign's use in ecm-distro-tools/publish-image.
       # - Read vault secrets in rancher-eio/read-vault-secrets.
       id-token: write
+      packages: write
+      attestations: write
 
     runs-on: ubuntu-latest