permissions

Signed-off-by: Benji Visser <benji@093b.org>
noqcks · Jul 2, 2023 · c476275 · c476275
1 parent dfe83c5
commit c476275
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,6 +5,11 @@ on:
     tags:
       - '*'
 
+permissions:
+  contents: write # needed to write releases
+  id-token: write # needed for keyless signing
+  packages: write # needed for ghcr access
+
 jobs:
   # test:
   #   runs-on: "ubuntu-latest"
@@ -43,7 +48,7 @@ jobs:
         run: go install github.com/anchore/syft/cmd/syft@latest
 
       - name: Install cosign
-        run: go install github.com/sigstore/cosign/cmd/cosign@latest
+        uses: sigstore/cosign-installer@v3.1.1
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v4