need write perms to store note (#40)

Signed-off-by: Tom Hennen <[email protected]>

Author: TomHennen

.github/workflows/create_slsa_source_vsa.yml

@@ -6,7 +6,7 @@ on:
 jobs:
   create_vsa:
     permissions:
-      contents: read
+      contents: write # needed for storing the vsa in the repo
       id-token: write
     runs-on: ubuntu-latest
     steps:

.github/workflows/local_attest.yml

@@ -8,10 +8,10 @@ on:
   workflow_dispatch:
 
 jobs:
-  # Whenever new source is pushed or a PR is received, scan it for any issues
+  # Whenever new source is pushed or a PR is received, create a new vsa
   check-change:
     permissions:
-      contents: read
+      contents: write # needed for storing the vsa in the repo.
       id-token: write
     # TODO: Can we make this work for forks too?
     uses: slsa-framework/slsa-source-poc/.github/workflows/create_slsa_source_vsa.yml@main