minimize workflow privs

This commit is contained in:
Kenneth Bingham 2025-02-24 16:07:39 -05:00
parent 66a88151ce
commit c7e85eb911
No known key found for this signature in database
GPG Key ID: 31709281860130B6

View File

@ -12,8 +12,7 @@ jobs:
publish-docker-images: publish-docker-images:
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
permissions: permissions:
contents: write # need write to draft the release id-token: write # need write to get OIDC token for generating attestations
id-token: write # need write to get OIDC token for generating attestations
attestations: write # need write to create attestations attestations: write # need write to create attestations
env: env:
REGISTRY: docker.io REGISTRY: docker.io