Grant permissions in caller job

samhclark · Oct 20, 2024 · e0e2da9 · e0e2da9
1 parent 1af40d0
commit e0e2da9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -9,6 +9,11 @@ on:
 jobs:
   build-custom-silverblue:
     uses: ./.github/workflows/reusable-build.yaml
+    permissions:
+      attestations: write
+      contents: read
+      id-token: write
+      packages: write
     with:
       containerfile_path: ./Containerfile
       registry: ghcr.io