Attestations need permissions to attest (#106)

Signed-off-by: Bradley Reynolds <bradley.reynolds@darbia.dev>
darbiadev · Jul 19, 2024 · 85ff900 · 85ff900
1 parent a5c28a4
commit 85ff900
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/container-build-deploy.yaml b/.github/workflows/container-build-deploy.yaml
@@ -14,6 +14,8 @@ permissions:
   # This is used to complete the identity challenge
   # with sigstore/fulcio.
   id-token: write
+  # Used by actions/attest-build-provenance
+  attestations: write
 
 jobs:
   build-push: