From 026c540730dd5bafad6c468af4cb2176bd0327cb Mon Sep 17 00:00:00 2001
From: laurentsimon <laurentsimon@google.com>
Date: Tue, 19 Jul 2022 01:21:35 +0000
Subject: [PATCH] update

---
 ci/generator-generic-ossf-slsa3-publish.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ci/generator-generic-ossf-slsa3-publish.yml b/ci/generator-generic-ossf-slsa3-publish.yml
index eae7431..54c110e 100644
--- a/ci/generator-generic-ossf-slsa3-publish.yml
+++ b/ci/generator-generic-ossf-slsa3-publish.yml
@@ -55,9 +55,9 @@ jobs:
   provenance:
     needs: [build]
     permissions:
-      actions: read
-      id-token: write
-      contents: read
+      actions: read   # To read the workflow path.
+      id-token: write # To sign the provenance.
+      contents: write # To add assets to a release.
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.0
     with:
       base64-subjects: "${{ needs.build.outputs.digests }}"