ci: add attestations: write permissions

Signed-off-by: Rafael Passos <rafael@rcpassos.me>

Author: auyer

.github/workflows/publish.yaml

@@ -14,6 +14,7 @@ jobs:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
+      attestations: write # add slsa attestations
     name: "Build and Publish Release"
     outputs:
       hashes: ${{ steps.hash.outputs.hashes }}
@@ -141,6 +142,7 @@ jobs:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
+      attestations: write # add slsa attestations
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
     with:
       base64-subjects: "${{ needs.release.outputs.hashes }}"