From f6ac592b1f442864a2c49311b1dcd67209c6793f Mon Sep 17 00:00:00 2001
From: Jhonatan Gonzalez <jhesgodi@gmail.com>
Date: Fri, 30 Aug 2024 12:33:05 +1000
Subject: [PATCH] [NO CHANGELOG] fix: Error with NPM deploy attestations step
 (#2128)

---
 .github/workflows/publish.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 151b960acd..45995128bb 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -30,9 +30,6 @@ on:
     branches:
       - main
 
-permissions:
-  attestations: write # Required for GitHub Attestation
-
 env:
   RELEASE_TYPE: ${{ github.event.inputs.release_type || 'alpha' }}
   UPGRADE_TYPE: ${{ github.event.inputs.upgrade_type || 'none' }}
@@ -50,6 +47,9 @@ jobs:
       GH_TOKEN: ${{ secrets.TS_IMMUTABLE_SDK_GITHUB_TOKEN }}
       NODE_OPTIONS: --max-old-space-size=14366
       SDK_PUBLISH_SLACK_WEBHOOK: ${{ secrets.SDK_PUBLISH_SLACK_WEBHOOK }}
+    permissions:
+      id-token: write # Required for GitHub Attestation
+      attestations: write # Required for GitHub Attestation
     steps:
       - name: Check Public Release Branch
         if: contains(env.RELEASE_TYPE , 'release') && (github.ref != 'refs/heads/main')