[llvm-branch-commits] [llvm] release/19.x: workflows/release-tasks: Add missing permissions for release binaries (#102023) (PR #102057)

Tobias Hieta via llvm-branch-commits llvm-branch-commits at lists.llvm.org
Sat Aug 10 02:59:00 PDT 2024


https://github.com/tru updated https://github.com/llvm/llvm-project/pull/102057

>From e1c32a819d223aed47ff4253fde919fb0cb89b37 Mon Sep 17 00:00:00 2001
From: Tom Stellard <tstellar at redhat.com>
Date: Mon, 5 Aug 2024 13:30:04 -0700
Subject: [PATCH] workflows/release-tasks: Add missing permissions for release
 binaries (#102023)

Now that the release binaries create artifact attestations, we need to
ensure that we call the workflow with the correct permissions.

(cherry picked from commit dc349a3f47882cdac7112c763d2964b59e77356a)
---
 .github/workflows/release-tasks.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release-tasks.yml b/.github/workflows/release-tasks.yml
index 7dd4c306671b74..b7fea0785fed29 100644
--- a/.github/workflows/release-tasks.yml
+++ b/.github/workflows/release-tasks.yml
@@ -78,6 +78,8 @@ jobs:
     name: Build Release Binaries
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     needs:
       - validate-tag
       - release-create



More information about the llvm-branch-commits mailing list