perms

Signed-off-by: Aditya Sirish <[email protected]>
in-toto · Sep 4, 2024 · 48cc106 · 48cc106
1 parent 1d5a71e
commit 48cc106
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/.github/workflows/gittuf-rsl-non-main.yml b/.github/workflows/gittuf-rsl-non-main.yml
@@ -27,11 +27,9 @@ jobs:
           git config --global user.name "${{ github.workflow }}"
           git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
 
-          ssh -V
-
           gittuf_key_path="/tmp/gittuf-key"
-
           echo "$KEY" > $gittuf_key_path
+          chmod 600 $gittuf_key_path
 
           git fetch origin refs/gittuf/reference-state-log:refs/gittuf/reference-state-log
           GITTUF_DEV=1 gittuf dev attest-github --signing-key $gittuf_key_path --repository ${{ github.repository }} --pull-request-number ${{ github.event.pull_request.number }}