Grant write perms for artifact upload

defenseunicorns · Oct 9, 2024 · 06fe8d3 · 06fe8d3
1 parent 7336000
commit 06fe8d3
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/container-scan.yaml b/.github/workflows/container-scan.yaml
@@ -1,7 +1,8 @@
 name: Container Scans
 
 permissions:
-  contents: read
+  actions: read
+  contents: write # for sbom-action artifact uploads
 
 on:
   push:
@@ -34,4 +35,6 @@ jobs:
       - name: Generate SBOM
         uses: anchore/sbom-action@v0
         with:
-          image: pepr:dev
+          image: pepr:dev
+          upload-artifact: true
+          upload-artifact-retention: 30