From 907bb6aa4f26687c7bf7420e34a94edbfa97ad02 Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Tue, 3 Dec 2024 19:38:38 +0100
Subject: [PATCH] Adjust the permissions.

---
 .github/workflows/deploy-tag.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/deploy-tag.yml b/.github/workflows/deploy-tag.yml
index 4258b83c..671dbcea 100644
--- a/.github/workflows/deploy-tag.yml
+++ b/.github/workflows/deploy-tag.yml
@@ -57,9 +57,9 @@ jobs:
     name: Generate SLSA provenance attestation
     needs: attest
     permissions:
-      attestations: write
       contents: read
       id-token: write
+      actions: read
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
     with:
       base64-subjects-as-file: "${{ needs.attest.outputs.base64-subjects }}"