From f4fedb06a07d1517b92701d362f537d8b84e9fa4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bastian=20Echterh=C3=B6lter?=
 <bastian.echterhoelter@sap.com>
Date: Sat, 11 Apr 2026 12:19:38 +0200
Subject: [PATCH] feat(ci): add attestations permission for build provenance
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enable SLSA build provenance attestation by granting the
attestations:write permission required by the shared
job-docker-build-push workflow.

Ref: platform-mesh/backlog#229

Signed-off-by: Bastian Echterhölter <bastian.echterhoelter@sap.com>
On-behalf-of: @SAP <bastian.echterhoelter@sap.com>
---
 .github/workflows/pipeline.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml
index e9458322..685f0cee 100644
--- a/.github/workflows/pipeline.yaml
+++ b/.github/workflows/pipeline.yaml
@@ -15,6 +15,7 @@ permissions:
   issues: write
   packages: write
   pull-requests: write
+  attestations: write
 
 concurrency:
   group: ${{ github.ref }}