From b15bd9685cbee620404668e01d8098c13acb2edf Mon Sep 17 00:00:00 2001
From: shocknet-justin <justin@shock.network>
Date: Tue, 9 Sep 2025 15:19:44 -0400
Subject: [PATCH] Fix attestation permissions and remove github-token parameter

---
 .github/workflows/push.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 6513278b..c110d708 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -18,7 +18,7 @@ jobs:
       contents: read
       packages: write
       id-token: write
-      security-events: write
+      attestations: write
 
     steps:
       - name: Checkout repository
@@ -70,4 +70,4 @@ jobs:
         with:
           subject-digest: ${{ steps.capture-digest.outputs.digest }}
           subject-name: ${{ steps.meta.outputs.tags }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          push-to-registry: true