From b46b5362a4076c99fbadc5df2678015647d2f8f0 Mon Sep 17 00:00:00 2001
From: Scott Leggett <scott@sl.id.au>
Date: Fri, 28 Jun 2024 21:33:45 +0800
Subject: [PATCH] fix: add correct permissions for release attestation

---
 .github/workflows/release.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b15a9fa..82b583f 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -24,6 +24,7 @@ jobs:
       # create release
       contents: write
       # required by attest-build-provenance
+      id-token: write
       attestations: write
     needs: release-tag
     if: needs.release-tag.outputs.new-tag == 'true'