fix(CI): create identity for the runner to sign the artifact

meysam81 · Nov 10, 2024 · ac99965 · ac99965
1 parent 32d8c23
commit ac99965
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.cosign/cosign.pub b/.cosign/cosign.pub
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEX977Wvc3ItcMShF/1Sk4qjCgh0wn
+vZXuRMGYVYphw/IBUkhWIbo+fxvtxKlVYUG1TwXo9jq+numKE9HBBWQEMg==
+-----END PUBLIC KEY-----
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -92,6 +92,7 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     permissions:
       packages: write
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -154,6 +155,8 @@ jobs:
       - release-please
     if: needs.release-please.outputs.releases_created == 'true'
     permissions:
+      contents: write
+      id-token: write
       packages: write
     runs-on: ubuntu-latest
     steps: