release/v1.1: fix release permissions (#338)

Signed-off-by: Asra Ali <asraa@google.com> Signed-off-by: Asra Ali <asraa@google.com>
slsa-framework · Oct 28, 2022 · d4f219f · d4f219f
1 parent 5078ec5
commit d4f219f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ permissions: read-all
 jobs:
   builder:
     permissions:
+      actions: read # For the detection of GitHub Actions environment.
       id-token: write # For signing.
       contents: write # For asset uploads.
     uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.2.1