From 3a87b60a99f936d906bfcab8a18114c01ba8fddf Mon Sep 17 00:00:00 2001 From: uvmsci Date: Tue, 4 Feb 2025 11:19:42 +0100 Subject: [PATCH] ci: adds actions permissions for docker publish --- .github/workflows/docker-publish.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index ed8cf26..6d1a226 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -17,6 +17,7 @@ jobs: runs-on: ubuntu-latest permissions: + actions: write # for git tag contents: write # This is used to complete the identity challenge @@ -34,7 +35,7 @@ jobs: # https://github.com/sigstore/cosign-installer - name: Install cosign if: github.event_name != 'pull_request' - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da #v3.7.0 + uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0 with: cosign-release: 'v2.4.1'