From 1a91223e8940ecffc4edadec265aa8026b68fc76 Mon Sep 17 00:00:00 2001
From: James Rich <2199651+jamesarich@users.noreply.github.com>
Date: Sat, 4 Oct 2025 12:37:04 -0500
Subject: [PATCH] feat(workflow): update permissions for release workflow
 (#3333)

---
 .github/workflows/create-or-promote-release.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/create-or-promote-release.yml b/.github/workflows/create-or-promote-release.yml
index 8fbf5829f..2787fbcfa 100644
--- a/.github/workflows/create-or-promote-release.yml
+++ b/.github/workflows/create-or-promote-release.yml
@@ -23,6 +23,9 @@ on:
 
 permissions:
   contents: write
+  pull-requests: read
+  id-token: write
+  attestations: write
 
 jobs:
   create-tag: