[llvm] workflows/release-tasks: Add missing permissions for release binaires (PR #102023)

via llvm-commits llvm-commits at lists.llvm.org
Mon Aug 5 10:29:15 PDT 2024


llvmbot wrote:


<!--LLVM PR SUMMARY COMMENT-->

@llvm/pr-subscribers-github-workflow

Author: Tom Stellard (tstellar)

<details>
<summary>Changes</summary>

Now that the release binaries create artifact attestations, we need to ensure that we call the workflow with the correct permissions.

---
Full diff: https://github.com/llvm/llvm-project/pull/102023.diff


1 Files Affected:

- (modified) .github/workflows/release-tasks.yml (+2) 


``````````diff
diff --git a/.github/workflows/release-tasks.yml b/.github/workflows/release-tasks.yml
index 7dd4c306671b7..b7fea0785fed2 100644
--- a/.github/workflows/release-tasks.yml
+++ b/.github/workflows/release-tasks.yml
@@ -78,6 +78,8 @@ jobs:
     name: Build Release Binaries
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     needs:
       - validate-tag
       - release-create

``````````

</details>


https://github.com/llvm/llvm-project/pull/102023


More information about the llvm-commits mailing list