add id-token permissions for cosign (#5857)

nginx · Jun 25, 2024 · 0fb7dde · 0fb7dde
1 parent 34c4fb9
commit 0fb7dde
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -298,6 +298,7 @@ jobs:
     needs: [variables]
     permissions:
       contents: read
+      id-token: write # for cosign to sign artifacts
     steps:
       - name: Checkout Repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7