actions permissions

kozakura913 · Apr 18, 2024 · 9d42517 · 9d42517
1 parent dcc8a4a
commit 9d42517
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
@@ -93,6 +93,12 @@ jobs:
           retention-days: 1
   merge:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
     if: ${{ github.event_name != 'pull_request' }}
     needs:
       - build