fix post submit job (#1747)

Signed-off-by: cpanato <[email protected]>
sigstore · Dec 23, 2024 · 9c37018 · 9c37018
1 parent 0fdb34f
commit 9c37018
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -21,7 +21,7 @@ on:
       - main
       - release-*
 
-permissions: read-all
+permissions: {}
 
 jobs:
   build:
@@ -31,6 +31,7 @@ jobs:
     permissions:
       id-token: write
       contents: read
+      packages: write
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2