From c7e85eb911c54ec3b766903d5e407a114f940ea9 Mon Sep 17 00:00:00 2001 From: Kenneth Bingham Date: Mon, 24 Feb 2025 16:07:39 -0500 Subject: [PATCH] minimize workflow privs --- .github/workflows/publish-docker-images.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/publish-docker-images.yml b/.github/workflows/publish-docker-images.yml index d1006c16..8f8f0b5b 100644 --- a/.github/workflows/publish-docker-images.yml +++ b/.github/workflows/publish-docker-images.yml @@ -12,8 +12,7 @@ jobs: publish-docker-images: runs-on: ubuntu-24.04 permissions: - contents: write # need write to draft the release - id-token: write # need write to get OIDC token for generating attestations + id-token: write # need write to get OIDC token for generating attestations attestations: write # need write to create attestations env: REGISTRY: docker.io