update

2022-07-19 01:21:35 +00:00
parent 19e6b35e84
commit 026c540730
1 changed files with 3 additions and 3 deletions
@@ -55,9 +55,9 @@ jobs:
  provenance:
    needs: [build]
    permissions:
-      actions: read
-      id-token: write
-      contents: read
+      actions: read   # To read the workflow path.
+      id-token: write # To sign the provenance.
+      contents: write # To add assets to a release.
    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.0
    with:
      base64-subjects: "${{ needs.build.outputs.digests }}"