add missing gh action permissions for full provenances

Change-Id: I88325750f1fe55d4cfbdae9642f453a0e126f9b0
project-oak · Apr 15, 2024 · 11fe6e6 · 11fe6e6
1 parent 7247942
commit 11fe6e6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/.github/workflows/full_provenance.yaml b/.github/workflows/full_provenance.yaml
@@ -34,6 +34,7 @@ jobs:
     permissions:
       actions: read
       id-token: write
+      contents: write # For uploading provenances.
     uses: ./.github/workflows/reusable_full_provenance.yaml
     with:
       build-config-path: ${{ matrix.buildconfig }}
diff --git a/.github/workflows/reusable_provenance.yaml b/.github/workflows/reusable_provenance.yaml
@@ -74,7 +74,7 @@ jobs:
     permissions:
       actions: read
       id-token: write
-      contents: write
+      contents: write # For uploading provenances.
     uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
     with:
       builder-image: 'europe-west2-docker.pkg.dev/oak-ci/oak-development/oak-development'