actions/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md to refer to attestations permission (#37)

Browse Source 
* Update README.md to refer to `attestations` permission

* Update ci.yml

* Update README.md

Co-authored-by: Brian DeHamer <bdehamer@github.com>

* Update README.md

Co-authored-by: Brian DeHamer <bdehamer@github.com>

* Update .github/workflows/ci.yml

Co-authored-by: Brian DeHamer <bdehamer@github.com>

---------

Co-authored-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Phill MV
2024-04-15 14:52:46 -04:00
committed by GitHub
parent dc20ac4f5d
commit 6a7057735b
2 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/ci.yml vendored
View File

@@ -50,7 +50,8 @@ jobs:
name: Test attest action name: Test attest action
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
contents: write contents: read
attestations: write
id-token: write id-token: write
env: env:
SUBJECT: /repos/${{ github.repository }}/tarball/${{ github.sha }} SUBJECT: /repos/${{ github.repository }}/tarball/${{ github.sha }}

10
README.md
View File

@@ -31,11 +31,11 @@ attest:
```yaml ```yaml
permissions: permissions:
id-token: write id-token: write
contents: write # TODO: Update this attestations: write
``` ```
The `id-token` permission gives the action the ability to mint the OIDC token The `id-token` permission gives the action the ability to mint the OIDC token
necessary to request a Sigstore signing certificate. The `contents` necessary to request a Sigstore signing certificate. The `attestations`
permission is necessary to persist the attestation. permission is necessary to persist the attestation.
1. Add the following to your workflow after your artifact has been built: 1. Add the following to your workflow after your artifact has been built:
@@ -128,7 +128,8 @@ jobs:
build: build:
permissions: permissions:
id-token: write id-token: write
contents: write contents: read
attestations: write
steps: steps:
- name: Checkout - name: Checkout
@@ -186,7 +187,8 @@ jobs:
permissions: permissions:
id-token: write id-token: write
packages: write packages: write
contents: write contents: read
attestations: write
env: env:
REGISTRY: ghcr.io REGISTRY: ghcr.io
IMAGE_NAME: ${{ github.repository }} IMAGE_NAME: ${{ github.repository }}