We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 965ddbc commit f6e1ab5Copy full SHA for f6e1ab5
1 file changed
.github/workflows/release.yml
@@ -6,9 +6,6 @@ on:
6
- main
7
8
permissions:
9
- # TODO(supply-chain): Review broad permissions. `contents: write` is needed to push tags;
10
- # `id-token: write` and `attestations: write` are needed for build attestations via
11
- # cli/gh-extension-precompile. Scope these down if attestation generation is removed.
12
contents: write
13
id-token: write
14
attestations: write
@@ -112,4 +109,4 @@ jobs:
112
109
- uses: cli/gh-extension-precompile@9e2237c30f869ad3bcaed6a4be2cd43564dd421b # v2.1.0
113
110
with:
114
111
go_version_file: go.mod
115
- generate_attestations: true
+ generate_attestations: true
0 commit comments