From faaf3f54dc36d9f4fc2bf7e106191e97ccd545cf Mon Sep 17 00:00:00 2001 From: Roberto Tyley <52038+rtyley@users.noreply.github.com> Date: Wed, 27 Nov 2024 14:51:38 +0000 Subject: [PATCH] See https://github.com/guardian/gha-scala-library-release-workflow/pull/47 --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3a843cf..417b9ee 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,8 +5,8 @@ on: jobs: release: - uses: guardian/gha-scala-library-release-workflow/.github/workflows/reusable-release.yml@v1 - permissions: { contents: write, pull-requests: write } + uses: guardian/gha-scala-library-release-workflow/.github/workflows/reusable-release.yml@attest + permissions: { contents: write, pull-requests: write, id-token: write, attestations: write } secrets: SONATYPE_TOKEN: ${{ secrets.AUTOMATED_MAVEN_RELEASE_SONATYPE_TOKEN }} PGP_PRIVATE_KEY: ${{ secrets.AUTOMATED_MAVEN_RELEASE_PGP_SECRET }}