actions/docker-attest-build-provenance
1
0
Fork 0
mirror of https://github.com/actions/attest-build-provenance.git synced 2025-12-14 03:12:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update README.md to use attestations permission (#43)

Browse Source 
* Update README.md to use `attestations` permission

* Update ci.yml

* Update ci.yml

* Update README.md

Co-authored-by: Brian DeHamer <bdehamer@github.com>

* Update README.md

Co-authored-by: Brian DeHamer <bdehamer@github.com>

---------

Co-authored-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Phill MV 2024-04-22 12:12:55 -04:00 committed by GitHub
parent 21a4fc8dbf
commit e9e8f489ae
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/ci.yml vendored
View File

@ -50,7 +50,8 @@ jobs:
name: Test attest-provenance action name: Test attest-provenance action
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
contents: write attestations: write
contents: read
id-token: write id-token: write
steps: steps:

10
README.md
View File

@ -29,11 +29,11 @@ attest:
```yaml ```yaml
permissions: permissions:
id-token: write id-token: write
contents: write # TODO: Update this attestations: write
``` ```
The `id-token` permission gives the action the ability to mint the OIDC token The `id-token` permission gives the action the ability to mint the OIDC token
permission is necessary to persist the attestation. The `contents` permission permission is necessary to persist the attestation. The `attestations` permission
is necessary to persist the attestation. is necessary to persist the attestation.
1. Add the following to your workflow after your artifact has been built: 1. Add the following to your workflow after your artifact has been built:
@ -112,7 +112,8 @@ jobs:
build: build:
permissions: permissions:
id-token: write id-token: write
contents: write contents: read
attestations: write
steps: steps:
- name: Checkout - name: Checkout
@ -166,7 +167,8 @@ jobs:
permissions: permissions:
id-token: write id-token: write
packages: write packages: write
contents: write contents: read
attestations: write
env: env:
REGISTRY: ghcr.io REGISTRY: ghcr.io
IMAGE_NAME: ${{ github.repository }} IMAGE_NAME: ${{ github.repository }}