From 282f6f833fec8fc6aa1990bf92f1a135af0e9ac9 Mon Sep 17 00:00:00 2001 From: Thibault VINCENT Date: Sun, 3 May 2026 17:27:29 +0200 Subject: [PATCH] ci(release): goreleaser needs the workflow token --- .github/workflows/release.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index f5d0e12..887d45c 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -166,6 +166,14 @@ jobs: with: version: latest args: release --clean + # GITHUB_TOKEN is the credential goreleaser uses to attach + # archives + checksums + signatures to the GitHub Release stub + # release-please created. The action does NOT inject the + # token automatically — it has to be in the env. The job's + # `permissions.contents: write` is what gives this token the + # write-Release scope. + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # SLSA Build Level 3 provenance for every binary listed in # GoReleaser's dist/checksums.txt (sha256sum -c format). Signed