ci(docker-build-push): permit writing attestations

darbiadev/.github#137 Signed-off-by: Siddhesh Mhadnak <[email protected]>
vipyrsec · Aug 3, 2024 · f96a074 · f96a074
1 parent 3de74a5
commit f96a074
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/image-build-push.yaml b/.github/workflows/image-build-push.yaml
@@ -15,6 +15,9 @@ permissions:
   # This is used to complete the identity challenge with sigstore/fulcio.
   id-token: write
 
+  # This is used to attest build provenance
+  attestations: write
+
 jobs:
   build-push:
     uses: darbiadev/.github/.github/workflows/docker-build-push.yaml@12e07d61ed37c908baa73f8d5550281b3ed9cddd # v13.1.2