chore: fix GITHUB_TOKEN permission

HenryQW · Dec 10, 2024 · 9ac155c · 9ac155c
1 parent cbc312a
commit 9ac155c
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 10 deletions.
diff --git a/.github/workflows/build-nightly-release.yml b/.github/workflows/build-nightly-release.yml
@@ -15,6 +15,7 @@ jobs:
       id-token: write
       contents: read
       attestations: write
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -64,11 +65,14 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
-      - name: Attest
+      - name: Attest (Dockerhub)
         uses: actions/attest-build-provenance@v2
-        id: attest
         with:
-          subject-name: |
-            docker.io/${{ vars.DOCKER_USERNAME }}/ttrss
-            ${{ env.REGISTRY }}/${{ github.repository }}
+          subject-name: ${{ vars.DOCKER_USERNAME }}/ttrss
+          subject-digest: ${{ steps.push.outputs.digest }}
+
+      - name: Attest (Container Registry)
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ github.repository }}
           subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
@@ -24,6 +24,7 @@ jobs:
       id-token: write
       contents: read
       attestations: write
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -72,11 +73,14 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
-      - name: Attest
+      - name: Attest (Dockerhub)
         uses: actions/attest-build-provenance@v2
-        id: attest
         with:
-          subject-name: |
-            docker.io/${{ vars.DOCKER_USERNAME }}/ttrss
-            ${{ env.REGISTRY }}/${{ github.repository }}
+          subject-name: ${{ vars.DOCKER_USERNAME }}/ttrss
+          subject-digest: ${{ steps.push.outputs.digest }}
+
+      - name: Attest (Container Registry)
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ github.repository }}
           subject-digest: ${{ steps.push.outputs.digest }}