id token permission for Docker image signing #5

irongut · Jul 7, 2022 · 93decb7 · 93decb7
1 parent ff5f9e6
commit 93decb7
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
@@ -34,6 +34,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write   # Used for identity challenge with sigstore/fulcio
+
     steps:
       - name: Checkout
         uses: actions/checkout@v3