From 6e63dc777f463beb731a56963761e9f85f32d8c2 Mon Sep 17 00:00:00 2001
From: Juan Antonio Osorio <ozz@stacklok.com>
Date: Fri, 25 Sep 2026 21:53:14 +0300
Subject: [PATCH] ci: enable OIDC skill signing

---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bdc0e05..3680073 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,6 +36,7 @@ jobs:
     permissions:
       contents: read
       packages: write # push the skill OCI artifact to GHCR
+      id-token: write # sign the OCI artifact with GitHub OIDC
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3