Update slsa-generic.yml

laurentsimon · Jul 19, 2022 · e8b32a8 · e8b32a8
1 parent 27b3dc3
commit e8b32a8
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/slsa-generic.yml b/.github/workflows/slsa-generic.yml
@@ -39,9 +39,9 @@ jobs:
   provenance:
     needs: [build]
     permissions:
-      actions: read
-      id-token: write
-      contents: read
+      actions: read   # To read the workflow path.
+      id-token: write # To sign the provenance.
+      contents: write # To add assets to a release.
     uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
     with:
       base64-subjects: "${{ needs.build.outputs.digests }}"