Made sure that the build attestation has the sufficient permissions

TUM-Dev · May 16, 2024 · 4bf6599 · 4bf6599
1 parent c468d35
commit 4bf6599
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 0 deletions.
diff --git a/.github/workflows/_docker-build.yml b/.github/workflows/_docker-build.yml
@@ -24,8 +24,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: read
       packages: write
+      attestations: write
     outputs:
       tags: ${{ steps.meta.outputs.tags }}
     steps:

diff --git a/.github/workflows/data-cicd.yml b/.github/workflows/data-cicd.yml
@@ -44,5 +44,7 @@ jobs:
       context: ./data
       dockerfile: Dockerfile
     permissions:
+      id-token: write
       contents: read
       packages: write
+      attestations: write
diff --git a/.github/workflows/server-cicd.yml b/.github/workflows/server-cicd.yml
@@ -58,5 +58,7 @@ jobs:
       context: ./server
       dockerfile: Dockerfile
     permissions:
+      id-token: write
       contents: read
       packages: write
+      attestations: write
diff --git a/.github/workflows/webclient-cicd.yml b/.github/workflows/webclient-cicd.yml
@@ -34,5 +34,7 @@ jobs:
       context: ./webclient
       dockerfile: Dockerfile
     permissions:
+      id-token: write
       contents: read
       packages: write
+      attestations: write