fix: Add missing attestations permission for build provenance

Fixed GitHub Actions error "Resource not accessible by integration" by adding
the required attestations: write permission to build_and_publish_docker.yml.

The attest-build-provenance action requires three specific permissions:
- id-token: write (for OIDC token minting)
- contents: read (for repository access)
- attestations: write (for persisting build attestations)

This resolves the integration permission error that was preventing Docker
image attestation generation during the build process.

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Patryk Ciechanski
2025-06-12 12:13:47 +02:00
parent 9507a325c2
commit 4b6c6619d8

View File

@@ -17,6 +17,7 @@ jobs:
contents: read
packages: write
id-token: write
attestations: write
steps:
- name: Checkout repository