From a5b1dd3862bf1ad7ee782540ba888717936848de Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 16 Aug 2024 19:07:07 +0000
Subject: [PATCH 1/3] Bump bincapz version to v0.18.0

---
 pkg/version/version.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/version/version.go b/pkg/version/version.go
index 225e6830d..813627094 100644
--- a/pkg/version/version.go
+++ b/pkg/version/version.go
@@ -6,7 +6,7 @@ import (
 )
 
 const (
-	ID string = "v0.17.1"
+	ID string = "v0.18.0"
 )
 
 // Check if the build info contains a version.

From 875860bc520fed28b687c473a8272c45f9af801a Mon Sep 17 00:00:00 2001
From: egibs <20933572+egibs@users.noreply.github.com>
Date: Fri, 16 Aug 2024 14:16:08 -0500
Subject: [PATCH 2/3] Add octo-sts config

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
---
 .github/chainguard/release.sts.yaml | 7 +++++++
 .github/workflows/version.yaml      | 6 ++++++
 2 files changed, 13 insertions(+)
 create mode 100644 .github/chainguard/release.sts.yaml

diff --git a/.github/chainguard/release.sts.yaml b/.github/chainguard/release.sts.yaml
new file mode 100644
index 000000000..2f2a49b5a
--- /dev/null
+++ b/.github/chainguard/release.sts.yaml
@@ -0,0 +1,7 @@
+issuer: https://token.actions.githubusercontent.com
+subject: repo:chainguard-dev/bincapz:ref:refs/heads/main
+claim_pattern:
+  job_workflow_ref: chainguard-dev/bincapz/.github/workflows/(version|release).yaml@.*
+
+permissions:
+  contents: write
diff --git a/.github/workflows/version.yaml b/.github/workflows/version.yaml
index 275fd4259..2ab77779a 100644
--- a/.github/workflows/version.yaml
+++ b/.github/workflows/version.yaml
@@ -26,6 +26,12 @@ jobs:
         egress-policy: audit 
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
     - uses: chainguard-dev/actions/setup-gitsign@e82b4e5ae10182af72972addcb3fedf7454621c8
+    - name: Set up Octo-STS
+        uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # v1.0.0
+        id: octo-sts
+        with:
+          scope: chainguard-dev/bincapz
+          identity: release
     - name: Update Version
       id: update
       run: |

From 1b8dae1cd3a52ebd24d8e94ed812bbb14e5c53ac Mon Sep 17 00:00:00 2001
From: egibs <20933572+egibs@users.noreply.github.com>
Date: Fri, 16 Aug 2024 14:17:09 -0500
Subject: [PATCH 3/3] Add PR permissions

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
---
 .github/chainguard/release.sts.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/chainguard/release.sts.yaml b/.github/chainguard/release.sts.yaml
index 2f2a49b5a..bf9270335 100644
--- a/.github/chainguard/release.sts.yaml
+++ b/.github/chainguard/release.sts.yaml
@@ -5,3 +5,4 @@ claim_pattern:
 
 permissions:
   contents: write
+  pull-requests: write