add write permission for attestation

zariiii9003 · Nov 19, 2024 · 7fcd45c · 7fcd45c
1 parent 3eeb856
commit 7fcd45c
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
@@ -71,9 +71,10 @@ jobs:
     permissions:
       id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
       contents: write  # for action-gh-release
+      attestations: write  # for attest-build-provenance
 
-    # upload to PyPI only on release
-    if: github.event.release && github.event.action == 'published'
+    # upload to PyPI on new tag
+    if: startsWith(github.ref, 'refs/tags')
     steps:
       - uses: actions/download-artifact@v4
         with: