Merge pull request #1675 from actions/provenance-permissions

fix permissions for release workflow
actions · Feb 26, 2024 · 29bf378 · 29bf378
2 parents c366a07 + 68b042f
commit 29bf378
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
@@ -5,7 +5,7 @@ on:
     inputs:
       package:
         required: true
-        description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache'
+        description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache, attest'
 
 jobs:
   test:
@@ -49,6 +49,9 @@ jobs:
     runs-on: macos-latest
     needs: test
     environment: npm-publish
+    permissions:
+      contents: read
+      id-token: write
     steps:
 
       - name: download artifact