From e67a2e9d1cc74b72077d5588a1e2033b9c456b12 Mon Sep 17 00:00:00 2001 From: David Wertenteil Date: Tue, 30 Apr 2024 15:59:19 +0300 Subject: [PATCH] permissions Signed-off-by: David Wertenteil --- .github/workflows/00-pr-scanner.yaml | 2 ++ .github/workflows/02-release.yaml | 3 +++ 2 files changed, 5 insertions(+) diff --git a/.github/workflows/00-pr-scanner.yaml b/.github/workflows/00-pr-scanner.yaml index 0d19bb0a..278ea458 100644 --- a/.github/workflows/00-pr-scanner.yaml +++ b/.github/workflows/00-pr-scanner.yaml @@ -35,6 +35,7 @@ jobs: security-events: read statuses: read attestations: read + contents: write uses: ./.github/workflows/a-pr-scanner.yaml with: RELEASE: "" @@ -60,6 +61,7 @@ jobs: security-events: read statuses: read attestations: read + contents: write uses: ./.github/workflows/b-binary-build-and-e2e-tests.yaml with: COMPONENT_NAME: kubescape diff --git a/.github/workflows/02-release.yaml b/.github/workflows/02-release.yaml index dbbf8e72..2785bb5d 100644 --- a/.github/workflows/02-release.yaml +++ b/.github/workflows/02-release.yaml @@ -31,6 +31,7 @@ jobs: security-events: read statuses: read attestations: write + contents: write needs: [retag] uses: ./.github/workflows/b-binary-build-and-e2e-tests.yaml with: @@ -57,6 +58,7 @@ jobs: statuses: read security-events: read attestations: read + contents: write needs: [retag, binary-build] uses: ./.github/workflows/c-create-release.yaml with: @@ -80,6 +82,7 @@ jobs: security-events: read statuses: read attestations: read + contents: write uses: ./.github/workflows/d-publish-image.yaml needs: [create-release, retag] with: