Skip to content

docs: update required workflow permissions in attestations.md#5900

Merged
caarlos0 merged 1 commit intogoreleaser:mainfrom
mroth:patch-3
Jul 12, 2025
Merged

docs: update required workflow permissions in attestations.md#5900
caarlos0 merged 1 commit intogoreleaser:mainfrom
mroth:patch-3

Conversation

@mroth
Copy link
Copy Markdown
Contributor

@mroth mroth commented Jul 11, 2025

This updates the documentation regarding attestations to address two issues I hit when following the docs.

  1. Adds id-token: write permissions to the Github Actions workflow. Without this, the signature will fail. See https://github.com/actions/attest-build-provenance?tab=readme-ov-file#usage for reference.
  2. Show the goreleaser configuration file checksum filename modified to match the predictable filename in the actions workflow.

@pull-request-size pull-request-size Bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jul 11, 2025
@caarlos0 caarlos0 merged commit 4901e72 into goreleaser:main Jul 12, 2025
1 check passed
@caarlos0
Copy link
Copy Markdown
Member

good catch! thanks!🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants