Allow artifact-metadata read in release workflow

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
fix workflow permissions
2026-03-02 17:50:26 +00:00 · 2025-11-11 16:13:16 +01:00 · 2025-11-11 16:10:15 +01:00
1 changed files with 3 additions and 1 deletions
--- a/.github/workflows/02-release.yaml
+++ b/.github/workflows/02-release.yaml
@@ -3,7 +3,7 @@ permissions: read-all
 on:
  push:
    tags:
-      - 'v*.*.*-rc.*'
+      - "v*.*.*-rc.*"
 jobs:
  retag:
    outputs:
@@ -32,6 +32,7 @@ jobs:
      statuses: read
      contents: write
      attestations: write
+      artifact-metadata: read
    needs: [retag]
    uses: ./.github/workflows/b-binary-build-and-e2e-tests.yaml
    with:
@@ -59,6 +60,7 @@ jobs:
      statuses: read
      security-events: read
      attestations: read
+      artifact-metadata: read
    needs: [retag, binary-build]
    uses: ./.github/workflows/c-create-release.yaml
    with:
Author	SHA1	Message	Date
Matthias Bertschy	5c2275e32a	Allow artifact-metadata read in release workflow Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>	2025-11-11 16:13:16 +01:00
Matthias Bertschy	2da4736201	fix workflow permissions Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>	2025-11-11 16:10:15 +01:00