build-docker-images-tags: Grant enough permissions to sign images

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit 788c0da85e05bfbc46a9f0af4d5276568c80ec51)

diff --git a/.github/workflows/build-docker-images-tags.yml b/.github/workflows/build-docker-images-tags.yml
index 07074bd574528b2cdc77080310a7c2431cab94b7..c8e46e5e8923c2d313773215b6e773a96a32cb48 100644 (file)
--- a/.github/workflows/build-docker-images-tags.yml
+++ b/.github/workflows/build-docker-images-tags.yml
@@ -11,6 +11,9 @@ on:
 permissions:
   actions: read
   contents: read
+  # This is used to complete the identity challenge
+  # with sigstore/fulcio when running outside of PRs.
+  id-token: write
 
 jobs:
   prepare: