[llvm] workflows/release-tasks: Add missing permissions for release binaires (PR #102023)

Tom Stellard via llvm-commits llvm-commits at lists.llvm.org
Mon Aug 5 10:28:40 PDT 2024


https://github.com/tstellar created https://github.com/llvm/llvm-project/pull/102023

Now that the release binaries create artifact attestations, we need to ensure that we call the workflow with the correct permissions.

>From 633f982e7e2fd5800155e94af536f33230cbbf1f Mon Sep 17 00:00:00 2001
From: Tom Stellard <tstellar at redhat.com>
Date: Mon, 5 Aug 2024 10:26:26 -0700
Subject: [PATCH] workflows/release-tasks: Add missing permissions for release
 binaires

Now that the release binaries create artifact attestations, we need
to ensure that that workflow has the correct permissions.
---
 .github/workflows/release-tasks.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release-tasks.yml b/.github/workflows/release-tasks.yml
index 7dd4c306671b7..b7fea0785fed2 100644
--- a/.github/workflows/release-tasks.yml
+++ b/.github/workflows/release-tasks.yml
@@ -78,6 +78,8 @@ jobs:
     name: Build Release Binaries
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     needs:
       - validate-tag
       - release-create



More information about the llvm-commits mailing list