Grant write permissions to the sbom generation (#2360)

Allows the container SBOM signatures to be uploaded. Signed-off-by: Ben Cotton <[email protected]>
guacsec · Dec 12, 2024 · 68610a4 · 68610a4
1 parent 68bb630
commit 68610a4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -143,6 +143,8 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     permissions:
       id-token: write # needed for signing the images with GitHub OIDC Token
+      packages: write # needed to upload signatures
+      contents: write # To upload assets to release
     steps:
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v3