From 7d9d3f5a432d2488bb1c80b92c17e181a4612e6b Mon Sep 17 00:00:00 2001
From: Geoffrey Thomas <geofft@ldpreload.com>
Date: Fri, 8 Aug 2025 16:10:32 -0400
Subject: [PATCH] workflows: Add annotating permission to 'annotate uv' action

---
 .github/workflows/build-docker.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 88b0342cd..3df2f80f5 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -348,6 +348,8 @@ jobs:
       - docker-plan
       - docker-publish-base
       - docker-publish-extra
+    permissions:
+      attestations: write # for GHCR attestations
     if: ${{ needs.docker-plan.outputs.push == 'true' }}
     steps:
       - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0