Add contents:write permissions to be able to create releases

Signed-off-by: Brend Smits <[email protected]>
philips-labs · Mar 2, 2022 · 1d823a5 · 1d823a5
1 parent eafc965
commit 1d823a5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -73,6 +73,7 @@ jobs:
     permissions:
       packages: write
       id-token: write
+      contents: write
 
     steps:
       - name: Set up Go
@@ -156,6 +157,7 @@ jobs:
     permissions:
       packages: write
       id-token: write
+      contents: write
     env:
       TAGS: "${{ needs.release.outputs.container_tags }}"
 
@@ -203,6 +205,7 @@ jobs:
     permissions:
       packages: write
       id-token: write
+      contents: write
 
     steps:
       - name: Generate provenance for Release
@@ -246,6 +249,7 @@ jobs:
     permissions:
       packages: write
       id-token: write
+      contents: write
 
     strategy:
       matrix:

diff --git a/.goreleaser.draft.yml b/.goreleaser.draft.yml
@@ -141,7 +141,5 @@ changelog:
 release:
   draft: true
   prerelease: auto
-  extra_files:
-    - glob: "./cosign.pub"
   footer: |
     **Full Changelog**: https://github.com/philips-labs/slsa-provenance-action/compare/{{ .PreviousTag }}...{{ .Tag }}