release/v1.0: fix release permissions (#337)

Signed-off-by: Asra Ali <asraa@google.com> Signed-off-by: Asra Ali <asraa@google.com>
slsa-framework · Oct 28, 2022 · f6319dd · f6319dd
1 parent e3809e7
commit f6319dd
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ permissions: read-all
 jobs:
   builder:
     permissions:
+      actions: read # For the detection of GitHub Actions environment.
       id-token: write # For signing.
       contents: write # For asset uploads.
     uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.2.1