From 43ea1f72f9e76e7da27b2972c61f43b94e332558 Mon Sep 17 00:00:00 2001 From: elhoim Date: Mon, 31 Aug 2026 13:52:39 +0000 Subject: [PATCH] ci: drop unused attestations permission from PyPI publish job The publish job in .github/workflows/pypi-publish.yml granted attestations: write, but nothing in the workflow uses it - pypa/gh-action-pypi-publish's PEP 740 attestation support rides on id-token: write alone, and actions/attest-build-provenance is never invoked. Drop the unused permission to keep the job's grant minimal. --- .github/workflows/pypi-publish.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index 48a95d5..c4208dc 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -39,7 +39,6 @@ jobs: runs-on: ubuntu-latest permissions: id-token: write - attestations: write environment: name: pypi url: https://pypi.org/p/misp-modules-cli