1
0
Fork 0

fix permissions for release workflow

Signed-off-by: Brian DeHamer <bdehamer@github.com>
pull/1675/head
Brian DeHamer 2024-02-26 11:32:45 -08:00
parent c366a07d62
commit 68b042febd
No known key found for this signature in database
1 changed files with 4 additions and 1 deletions

View File

@ -5,7 +5,7 @@ on:
inputs: inputs:
package: package:
required: true required: true
description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache' description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache, attest'
jobs: jobs:
test: test:
@ -49,6 +49,9 @@ jobs:
runs-on: macos-latest runs-on: macos-latest
needs: test needs: test
environment: npm-publish environment: npm-publish
permissions:
contents: read
id-token: write
steps: steps:
- name: download artifact - name: download artifact