fix: token

fad3t · Oct 2, 2024 · d93e232 · d93e232
1 parent b87191e
commit d93e232
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -8,6 +8,10 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish-first:
     runs-on: ubuntu-24.04
@@ -47,7 +51,7 @@ jobs:
           helm package test-chart --dependency-update --version "${ersion}"
           helm push test-chart-*.tgz "oci://registry-1.docker.io/fad3t" &> metadata.txt
           digest=$(awk '/Digest: /{print $2}' metadata.txt)
-          echo "digest=${digest}" >> GITHUB_OUTPUT
+          echo "digest=${digest}" >> $GITHUB_OUTPUT
 
       - name: Install Cosign
         uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0