add build attestation permissions

some-natalie · Dec 11, 2024 · b21ce6e · b21ce6e
1 parent f791c21
commit b21ce6e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/build-latest.yml b/.github/workflows/build-latest.yml
@@ -13,6 +13,7 @@ jobs:
       packages: write # for uploading the finished container
       security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
       id-token: write # to complete the identity challenge with sigstore/fulcio when running outside of PRs
+      attestations: write # to create the attestations for the container
     strategy:
       matrix:
         os: [rootless-ubuntu-jammy, rootless-ubuntu-numbat, ubi8, ubi9, wolfi]