Skip to content

Commit 80f429a

Browse files
committed
fix(ci): remove id-token:write from workflow-level permissions
Keep workflow-level permissions minimal; id-token:write is already granted at the job level where it's needed. Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
1 parent ccbfc93 commit 80f429a

1 file changed

Lines changed: 1 addition & 3 deletions

File tree

.github/workflows/author_verification.yml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,7 @@ on:
44
push:
55
branches: ["main"]
66

7-
permissions:
8-
contents: read
9-
id-token: write # required for SLSA attestation
7+
permissions: read-all
108

119
jobs:
1210
verify:

0 commit comments

Comments
 (0)