From 3bd3685eca37037471724835e3e13ee2d86b4bb7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?M=C4=81ris=20Pop=C4=93ns?= Date: Fri, 25 Sep 2026 04:29:29 +0000 Subject: [PATCH] ci(build): grant artifact-metadata for the attestation storage record attest-build-provenance creates an artifact storage record for pushed images and warned on every build without this permission. --- .github/workflows/build.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 73bf8a0..8160010 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -26,6 +26,7 @@ jobs: packages: write id-token: write # Sigstore OIDC for build provenance attestations: write # record the attestation on the repo + artifact-metadata: write # storage record for the pushed image steps: - uses: actions/checkout@v7.0.1