Merge pull request #52 from ksunden/trusted_pub

Attestation workflow permission

Author: ksunden

.github/workflows/release.yml

@@ -44,6 +44,7 @@ jobs:
     environment: release
     permissions:
       id-token: write
+      contents: write
     steps:
       - name: Download packages
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16  # v4.1.8