rsp2k/headplane
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow id-token write in gh actions

Browse Source
This commit is contained in:
Aarnav Tale 2025-06-22 17:32:39 -04:00
parent 9a81b76398
commit 8f1b577b5e
No known key found for this signature in database
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/next.yaml vendored
View File

@ -12,6 +12,7 @@ permissions:
actions: write # Allow canceling in-progress runs actions: write # Allow canceling in-progress runs
contents: read # Read access to the repository contents: read # Read access to the repository
packages: write # Write access to the container registry packages: write # Write access to the container registry
id-token: write # For the attest action to push
jobs: jobs:
publish: publish:
@ -56,7 +57,7 @@ jobs:
platforms: linux/amd64, linux/arm64 platforms: linux/amd64, linux/arm64
cache-from: type=gha cache-from: type=gha
cache-to: type=gha,mode=max cache-to: type=gha,mode=max
- name: Attest - name: Attestation Provenance
uses: actions/attest-build-provenance@v2 uses: actions/attest-build-provenance@v2
id: attest id: attest
with: with:

3
.github/workflows/release.yaml vendored
View File

@ -12,6 +12,7 @@ permissions:
actions: write # Allow canceling in-progress runs actions: write # Allow canceling in-progress runs
contents: read # Read access to the repository contents: read # Read access to the repository
packages: write # Write access to the container registry packages: write # Write access to the container registry
id-token: write # For the attest action to push
jobs: jobs:
docker: docker:
@ -54,7 +55,7 @@ jobs:
platforms: linux/amd64, linux/arm64 platforms: linux/amd64, linux/arm64
cache-from: type=gha cache-from: type=gha
cache-to: type=gha,mode=max cache-to: type=gha,mode=max
- name: Attest - name: Attestation Provenance
uses: actions/attest-build-provenance@v2 uses: actions/attest-build-provenance@v2
id: attest id: attest
with: with: