Apparently it wants the id-token as well...

Signed-off-by: Adrian Mouat <adrian@chainguard.dev>
chainguard-dev · Nov 7, 2024 · 4f3b8cf · 4f3b8cf
1 parent 4fea4d4
commit 4f3b8cf
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build-and-push-runners.yaml b/.github/workflows/build-and-push-runners.yaml
@@ -7,6 +7,7 @@ jobs:
   armbuild:
     runs-on: [linux-arm-for-testing]
     permissions: 
+      id-token: write
       attestations: write
       contents: read
     outputs:
@@ -58,6 +59,7 @@ jobs:
     outputs:
       digest: ${{ steps.build.outputs.digest }}
     permissions: 
+      id-token: write
       attestations: write
       contents: read
     steps: