Merge pull request #477 from powerapi-ng/ci/release-slsa-permissions

ci(release): Update SLSA generator permissions
powerapi-ng · Nov 28, 2024 · 0ddb31f · 0ddb31f
2 parents 10aee7c + 57278d9
commit 0ddb31f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -78,12 +78,13 @@ jobs:
     name: Generate artifacts provenance attestation
     needs: [build-python-package]
     permissions:
-      contents: read
       actions: read
+      contents: write
       id-token: write
     uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
     with:
       base64-subjects: "${{ needs.build-python-package.outputs.dist-hashes }}"
+      upload-assets: false
 
   publish-python-package:
     name: Publish Pypi Package