From 2d7f517b8594435b3acc03f45c737a50be773b4c Mon Sep 17 00:00:00 2001 From: Stefan Prodan Date: Wed, 21 Jun 2023 15:52:27 +0300 Subject: [PATCH] Generate provenance for container images Signed-off-by: Stefan Prodan --- .github/workflows/release.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 46bd5df..4a5117d 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -129,9 +129,9 @@ jobs: dockerhub-provenance: needs: [release] permissions: - actions: read # To read the workflow path. - id-token: write # To sign the provenance. - contents: write # To add assets to the release. + actions: read # for detecting the Github Actions environment. + id-token: write # for creating OIDC tokens for signing. + packages: write # for uploading attestations. uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.7.0 with: image: ${{ needs.release.outputs.image_url }} @@ -143,9 +143,9 @@ jobs: ghcr-provenance: needs: [release] permissions: - actions: read # To read the workflow path. - id-token: write # To sign the provenance. - contents: write # To add assets to the release. + actions: read # for detecting the Github Actions environment. + id-token: write # for creating OIDC tokens for signing. + packages: write # for uploading attestations. uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.7.0 with: image: ghcr.io/${{ needs.release.outputs.image_url }}