mirror of
https://git.mirrors.martin98.com/https://github.com/actions/toolkit
synced 2025-08-22 00:29:09 +08:00
Merge pull request #1675 from actions/provenance-permissions
fix permissions for release workflow
This commit is contained in:
commit
29bf378d97
5
.github/workflows/releases.yml
vendored
5
.github/workflows/releases.yml
vendored
@ -5,7 +5,7 @@ on:
|
||||
inputs:
|
||||
package:
|
||||
required: true
|
||||
description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache'
|
||||
description: 'core, artifact, cache, exec, github, glob, http-client, io, tool-cache, attest'
|
||||
|
||||
jobs:
|
||||
test:
|
||||
@ -49,6 +49,9 @@ jobs:
|
||||
runs-on: macos-latest
|
||||
needs: test
|
||||
environment: npm-publish
|
||||
permissions:
|
||||
contents: read
|
||||
id-token: write
|
||||
steps:
|
||||
|
||||
- name: download artifact
|
||||
|
Loading…
x
Reference in New Issue
Block a user