Set the permissions granted to the GITHUB_TOKEN

mganisin · May 24, 2024 · 5cf52fc · 5cf52fc
1 parent febdd80
commit 5cf52fc
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -4,6 +4,10 @@ on:
 jobs:
   build-image:
     runs-on: ubuntu-latest
+      permissions:
+        contents: read
+        packages: write
+        attestations: write
     steps:
       - uses: actions/checkout@v3
       - uses: docker/setup-qemu-action@v3