Add the contents: write permission to the publish job
@@ -65,6 +65,8 @@ jobs:
name: "Publish"
if: startsWith(github.ref, 'refs/tags/')
needs: ["build", "provenance"]
+ permissions:
+ contents: write
runs-on: "ubuntu-latest"
steps:
