mirror of
https://github.com/openziti/zrok.git
synced 2025-06-24 19:51:32 +02:00
minimize workflow privs
This commit is contained in:
parent
66a88151ce
commit
c7e85eb911
3
.github/workflows/publish-docker-images.yml
vendored
3
.github/workflows/publish-docker-images.yml
vendored
@ -12,8 +12,7 @@ jobs:
|
|||||||
publish-docker-images:
|
publish-docker-images:
|
||||||
runs-on: ubuntu-24.04
|
runs-on: ubuntu-24.04
|
||||||
permissions:
|
permissions:
|
||||||
contents: write # need write to draft the release
|
id-token: write # need write to get OIDC token for generating attestations
|
||||||
id-token: write # need write to get OIDC token for generating attestations
|
|
||||||
attestations: write # need write to create attestations
|
attestations: write # need write to create attestations
|
||||||
env:
|
env:
|
||||||
REGISTRY: docker.io
|
REGISTRY: docker.io
|
||||||
|
Loading…
x
Reference in New Issue
Block a user