From 621ccfe3e5618a8e94fdb688a1d676437d34f216 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Graber?= <stgraber@stgraber.org>
Date: Fri, 6 Dec 2024 17:30:02 -0500
Subject: [PATCH] github: Fix permission on secureboot keys
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
---
 .github/workflows/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f861ace..ef68e48 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -53,7 +53,9 @@ jobs:
           ) > mkosi.version
 
           echo "${{ secrets.SB_CERT }}" > mkosi.crt
+          chmod 644 mkosi.crt
           echo "${{ secrets.SB_KEY }}" > mkosi.key
+          chmod 600 mkosi.key
 
           make