From 57278d9a2aebf33e78ceefbee65b792cdf38932d Mon Sep 17 00:00:00 2001
From: Guillaume Fieni <guillaume.fieni@inria.fr>
Date: Thu, 28 Nov 2024 18:46:53 +0100
Subject: [PATCH] ci(release): Update SLSA generator permissions

---
 .github/workflows/release.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0f1ffad2..bc834da8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -78,12 +78,13 @@ jobs:
     name: Generate artifacts provenance attestation
     needs: [build-python-package]
     permissions:
-      contents: read
       actions: read
+      contents: write
       id-token: write
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
     with:
       base64-subjects: "${{ needs.build-python-package.outputs.dist-hashes }}"
+      upload-assets: false
 
   publish-python-package:
     name: Publish Pypi Package