Update build.yml

Author: ntkme

.github/workflows/build.yml

@@ -67,6 +67,8 @@ jobs:
             gh attestation verify dartsdk-linux-${{ matrix.host-arch }}-release.tar.gz --repo ${{ github.repository }} --signer-workflow ${{ github.repository }}/.github/workflows/build.yml@refs/tags/${{ steps.version.outputs.version }} || true
             rm -rf dart-sdk/sdk/tools/sdks/dart-sdk
             tar -xzf dartsdk-linux-${{ matrix.host-arch }}-release.tar.gz -C dart-sdk/sdk/tools/sdks
+          else
+            gh workflow run build.yml --repo ${{ github.repository }} --raw-field ref=${{ steps.version.outputs.version }}
           fi
         env:
           GH_TOKEN: ${{ github.token }}
@@ -97,8 +99,9 @@ jobs:
     runs-on: ubuntu-latest
 
     permissions:
-      id-token: write
+      actions: write
       attestations: write
+      id-token: write
 
     container:
       image: docker.io/library/alpine

.github/workflows/release.yml

@@ -8,8 +8,9 @@ on:
 jobs:
   build:
     permissions:
-      id-token: write
+      actions: write
       attestations: write
+      id-token: write
     uses: ./.github/workflows/build.yml
     with:
       ref: ${{ github.ref_name }}

.github/workflows/schedule.yml

@@ -59,8 +59,9 @@ jobs:
     needs: [latest]
     if: needs.latest.outputs.stable-cache-hit != 'true'
     permissions:
-      id-token: write
+      actions: write
       attestations: write
+      id-token: write
     uses: ./.github/workflows/build.yml
     with:
       ref: ${{ needs.latest.outputs.stable-version }}
@@ -70,8 +71,9 @@ jobs:
     needs: [latest]
     if: needs.latest.outputs.beta-cache-hit != 'true' && needs.latest.outputs.beta-version != needs.latest.outputs.stable-version
     permissions:
-      id-token: write
+      actions: write
       attestations: write
+      id-token: write
     uses: ./.github/workflows/build.yml
     with:
       ref: ${{ needs.latest.outputs.beta-version }}
@@ -81,8 +83,9 @@ jobs:
     needs: [latest]
     if: needs.latest.outputs.dev-cache-hit != 'true' && needs.latest.outputs.dev-version != needs.latest.outputs.beta-version && needs.latest.outputs.dev-version != needs.latest.outputs.stable-version
     permissions:
-      id-token: write
+      actions: write
       attestations: write
+      id-token: write
     uses: ./.github/workflows/build.yml
     with:
       ref: ${{ needs.latest.outputs.dev-version }}
@@ -91,8 +94,9 @@ jobs:
   edge:
     needs: [latest]
     permissions:
-      id-token: write
+      actions: write
       attestations: write
+      id-token: write
     uses: ./.github/workflows/build.yml
     with:
       ref: ${{ needs.latest.outputs.edge-version }}