From 8fe99ea45bc303b42701ca093180e48b261e6a99 Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Mon, 13 Jan 2025 20:47:15 +0100
Subject: [PATCH] Update these permissions.

---
 .github/workflows/deploy-tag.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/deploy-tag.yml b/.github/workflows/deploy-tag.yml
index 222f129..226ec2a 100644
--- a/.github/workflows/deploy-tag.yml
+++ b/.github/workflows/deploy-tag.yml
@@ -22,6 +22,8 @@ jobs:
     permissions:
       contents: read
       issues: write
+      attestations: write
+      id-token: write
     with:
       deploy: ${{ github.event_name != 'workflow_dispatch' }}
       plugin: user-switching