Closed shogo82148 closed 2 months ago
The changes made across multiple GitHub Actions workflow files (.github/workflows/darwin-arm64.yml
, .github/workflows/darwin-x64.yml
, .github/workflows/linux.yml
, .github/workflows/win32.yml
) involve updating permissions configurations for content reading/writing, id-token, and attestations. These updates ensure that the workflows have the necessary access rights for their respective tasks, enhancing security and functionality by explicitly declaring required permissions at different job steps.
File | Change Summary |
---|---|
.github/workflows/darwin-arm64.yml |
Added permissions configurations for contents , id-token , and attestations in different job steps. |
.github/workflows/darwin-x64.yml |
Added permissions configurations for contents , id-token , and attestations . Introduced actions/attest-build-provenance@v1 . |
.github/workflows/linux.yml |
Updated jobs to include permissions settings for contents , id-token , and attestations . |
.github/workflows/win32.yml |
Added permissions configurations and included actions/attest-build-provenance@v1 step in specific jobs. |
Changes spread across the workflow plains,
Permissions set, no code refrains.
Tokens, contents, attest with pride,
Our CI/CD now fortified.
A rabbit's joy in code so bright,
GitHub Actions, set just right! 🌟🐇
Summary by CodeRabbit